Home
last modified time | relevance | path

Searched full:unprivileged (Results 1 – 25 of 132) sorted by relevance

123456

/linux/net/smc/
H A Dsmc_netlink.c39 /* can be retrieved by unprivileged users */
44 /* can be retrieved by unprivileged users */
49 /* can be retrieved by unprivileged users */
54 /* can be retrieved by unprivileged users */
59 /* can be retrieved by unprivileged users */
64 /* can be retrieved by unprivileged users */
69 /* can be retrieved by unprivileged users */
74 /* can be retrieved by unprivileged users */
79 /* can be retrieved by unprivileged users */
101 /* can be retrieved by unprivileged users */
[all …]
/linux/tools/testing/selftests/bpf/progs/
H A Dbpf_misc.h16 * Programs could be loaded in privileged and unprivileged modes.
19 * imply unprivileged mode.
20 * If combination of privileged and unprivileged attributes is present
24 * that differ between privileged and unprivileged modes.
27 * unprivileged mode is derived from the usual program name by adding
42 * __msg_unpriv Same as __msg but for unprivileged mode.
43 * __not_msg_unpriv Same as __not_msg but for unprivileged mode.
54 * __xlated_unpriv Same as __xlated but for unprivileged mode.
86 * __jited_unpriv Same as __jited but for unprivileged mode.
90 * __success_unpriv Expect program load success in unprivileged mode.
[all …]
/linux/Documentation/admin-guide/
H A Dperf-security.rst54 ID is 0, referred to as superuser or root), and b) unprivileged
60 Unprivileged processes are subject to a full security permission check
67 files of unprivileged users.
69 Unprivileged processes with enabled CAP_PERFMON capability are treated
87 Prior Linux v5.9 unprivileged processes using perf_events system call
90 So unprivileged processes provided with CAP_SYS_PTRACE capability are
96 Other capabilities being granted to unprivileged processes can
223 Unprivileged users
226 perf_events *scope* and *access* control for unprivileged processes
243 imposed but ignored for unprivileged processes with CAP_IPC_LOCK
[all …]
/linux/include/linux/
H A Dfanotify.h32 * We do not allow unprivileged groups to request permission events.
33 * We do not allow unprivileged groups to get other process pid in events.
34 * We do not allow unprivileged groups to use unlimited resources.
45 * FAN_CLASS_NOTIF is the only class we allow for unprivileged group.
46 * We do not allow unprivileged groups to get file descriptors in events,
H A Dpsi_types.h156 /* Trigger type - PSI_AVGS for unprivileged, PSI_POLL for RT */
178 /* Unprivileged triggers against N*PSI_FREQ windows */
H A Dipc_namespace.h97 * MIN_*: Lowest value an admin can set the maximum unprivileged limit to
98 * DFLT_*MAX: Default values for the maximum unprivileged limits
/linux/Documentation/userspace-api/
H A Dno_new_privs.rst15 - chroot is disallowed to unprivileged processes, since it would allow
49 Unprivileged users are therefore only allowed to install such filters
53 available to an unprivileged user. If everything running with a
60 available to unprivileged tasks if ``no_new_privs`` is set. In principle,
/linux/Documentation/devicetree/bindings/riscv/
H A Dextensions.yaml51 version of the unprivileged ISA specification.
66 version of the unprivileged ISA specification.
70 20191213 version of the unprivileged specification.
75 ratified in the 20191213 version of the unprivileged ISA
81 20191213 version of the unprivileged ISA specification.
86 ratified in the 20191213 version of the unprivileged ISA
92 ratified in the 20191213 version of the unprivileged ISA
98 ratified in the 20191213 version of the unprivileged ISA
104 the 20191213 version of the unprivileged ISA specification.
109 ratified in the 20240411 version of the unprivileged ISA
[all …]
/linux/tools/bpf/bpftool/Documentation/
H A Dbpftool-feature.rst26 | **bpftool** **feature probe** [*COMPONENT*] [**full**] [**unprivileged**] [**macros** [**prefix**…
54 When the **unprivileged** keyword is used, bpftool will dump only the
57 small subset of the parameters supported by the system. Unprivileged users
58 MUST use the **unprivileged** keyword: This is to avoid misdetection if
/linux/Documentation/filesystems/fuse/
H A Dfuse-passthrough.rst73 This behavior leads to two main issues for unprivileged FUSE daemons:
85 (``RLIMIT_NOFILE``). If an unprivileged daemon could register backing files
102 filesystem stacking scenarios if unprivileged users could set up passthrough.
H A Dfuse.rst312 an unprivileged user - normally restricted from mounting with
316 processes in user namespaces where they're unprivileged. For this
379 Since we are talking about unprivileged userspace programs,
/linux/Documentation/process/
H A Dthreat-model.rst52 * **User-based isolation**: an unprivileged user may restrict access to their
53 own data from other unprivileged users running on the same system. This
77 When ``CONFIG_USER_NS`` is set, the kernel also permits unprivileged users to
124 unprivileged users, or reduce the kernel's ability to enforce some
/linux/tools/testing/selftests/tty/
H A Dtty_tiocsti_test.c44 * unprivileged processes and successfully perform TIOCSTI operations that the
45 * unprivileged process couldn't do directly.
48 * 1. Unprivileged process opens TTY (direct TIOCSTI fails due to lack of
50 * 2. Unprivileged process passes FD to privileged process via SCM_RIGHTS
132 * Since we're testing the scenario where an unprivileged process pass an FD
616 TH_LOG("Privileged parent can use TIOCSTI on FD from unprivileged child"); in TEST_F()
/linux/Documentation/arch/riscv/
H A Duabi.rst10 Chapter 27 of the RISC-V Instruction Set Manual Volume I Unprivileged ISA
32 after standard unprivileged extensions. If multiple supervisor-level
H A Dcmodx.rst10 program must enforce its own synchronization with the unprivileged fence.i
45 Though fence.i is an unprivileged instruction, the default Linux ABI prohibits
/linux/tools/testing/selftests/mount/
H A D.gitignore2 unprivileged-remount-test
H A DMakefile7 TEST_GEN_FILES := unprivileged-remount-test nosymfollow-test
H A Drun_unprivileged_remount.sh8 ./unprivileged-remount-test ;
/linux/tools/testing/selftests/bpf/prog_tests/
H A Dunpriv_bpf_disabled.c53 /* Positive tests for unprivileged BPF disabled. Verify we can in sysctl_set()
144 /* Negative tests for unprivileged BPF disabled. Verify we cannot in test_unpriv_bpf_disabled_negative()
244 /* ensure unprivileged bpf disabled is set */ in test_unpriv_bpf_disabled()
/linux/Documentation/security/
H A Dself-protection.rst13 In the worst-case scenario, we assume an unprivileged local attacker
119 restricted to the more regular set of normally available to unprivileged
125 The kernel should never allow an unprivileged user the ability to
131 unprivileged socket API is nonsense: only the root or physically local
/linux/tools/testing/selftests/namespaces/
H A Dfile_handle_test.c32 /* Drop to unprivileged uid/gid */ in TEST()
53 /* Try to open using FD_NSFS_ROOT as unprivileged user */ in TEST()
63 "Permission denied for unprivileged user (expected)"); in TEST()
87 /* Drop to unprivileged uid/gid */ in TEST()
137 /* Drop to unprivileged uid/gid */ in TEST()
187 /* Drop to unprivileged uid/gid */ in TEST()
237 /* Drop to unprivileged uid/gid */ in TEST()
287 /* Drop to unprivileged uid/gid */ in TEST()
337 /* Drop to unprivileged uid/gid */ in TEST()
389 /* Drop to unprivileged uid/gid */ in TEST()
H A Dlistns_permissions_test.c24 * Test that unprivileged users can only see namespaces they're currently in.
58 /* Create user namespace to be unprivileged */ in TEST()
84 /* Now we're unprivileged - list all network namespaces */ in TEST()
127 TH_LOG("Unprivileged child saw its own namespace, plus %d others (likely init_net)", in TEST()
/linux/include/uapi/linux/
H A Dublk_cmd.h77 * ctrl_cmd) so that unprivileged devices can prepend the device path
261 * Unprivileged user can create /dev/ublkcN and /dev/ublkbN.
263 * /dev/ublk-control needs to be available for unprivileged user, and it
265 * unprivileged user. Except for the command of UBLK_CMD_ADD_DEV, all
276 * Then ublk server can be run as unprivileged user, and /dev/ublkbN can
/linux/arch/arm/kernel/
H A Dspectre.c45 return sprintf(buf, "Vulnerable: Unprivileged eBPF enabled\n"); in cpu_show_spectre_v2()
/linux/security/
H A DKconfig11 bool "Restrict unprivileged access to the kernel syslog"
14 This enforces restrictions on unprivileged users reading the kernel

123456