Searched full:unprivileged (Results 1 – 25 of 46) sorted by relevance
12
| /Documentation/userspace-api/ |
| D | no_new_privs.rst | 15 - chroot is disallowed to unprivileged processes, since it would allow
49 Unprivileged users are therefore only allowed to install such filters
53 available to an unprivileged user. If everything running with a
60 available to unprivileged tasks if ``no_new_privs`` is set. In principle,
|
| D | vduse.rst | 16 the data path is run by an unprivileged user. The support for other device
|
| D | landlock.rst | 7 Landlock: unprivileged access control
19 any process, including unprivileged ones, to securely restrict themselves.
542 Because Landlock targets unprivileged access controls, it needs to properly
|
| /Documentation/admin-guide/ |
| D | perf-security.rst | 54 ID is 0, referred to as superuser or root), and b) unprivileged
60 Unprivileged processes are subject to a full security permission check
67 files of unprivileged users.
69 Unprivileged processes with enabled CAP_PERFMON capability are treated
87 Prior Linux v5.9 unprivileged processes using perf_events system call
90 So unprivileged processes provided with CAP_SYS_PTRACE capability are
96 Other capabilities being granted to unprivileged processes can
223 Unprivileged users
226 perf_events *scope* and *access* control for unprivileged processes
243 imposed but ignored for unprivileged processes with CAP_IPC_LOCK
[all …]
|
| /Documentation/devicetree/bindings/riscv/ |
| D | extensions.yaml | 57 version of the unprivileged ISA specification.
72 version of the unprivileged ISA specification.
76 20191213 version of the unprivileged specification.
81 ratified in the 20191213 version of the unprivileged ISA
87 20191213 version of the unprivileged ISA specification.
92 ratified in the 20191213 version of the unprivileged ISA
98 ratified in the 20191213 version of the unprivileged ISA
104 ratified in the 20191213 version of the unprivileged ISA
110 the 20191213 version of the unprivileged ISA specification.
374 ratified in the 20191213 version of the unprivileged ISA
[all …]
|
| /Documentation/arch/riscv/ |
| D | uabi.rst | 10 chapter 27 of the unprivileged specification.
30 after standard unprivileged extensions. If multiple supervisor-level
|
| D | cmodx.rst | 10 program must enforce its own synchronization with the unprivileged fence.i
|
| /Documentation/driver-api/early-userspace/ |
| D | early_userspace_support.rst | 44 built by an unprivileged user.
65 Because device-special files cannot be created by a unprivileged user,
68 early userspace image can be built by an unprivileged user.
|
| /Documentation/block/ |
| D | ublk.rst | 150 permission check, and this command is added for supporting unprivileged
161 unprivileged application needs to query devices the current user owns,
220 Unprivileged ublk device is supported by passing ``UBLK_F_UNPRIVILEGED_DEV``.
221 Once the flag is set, all control commands can be sent by unprivileged
|
| /Documentation/security/ |
| D | landlock.rst | 14 including unprivileged ones. Because such a process may be compromised or
19 Landlock is designed to be usable by unprivileged processes while following the
|
| D | self-protection.rst | 13 In the worst-case scenario, we assume an unprivileged local attacker
119 restricted to the more regular set of normally available to unprivileged
125 The kernel should never allow an unprivileged user the ability to
131 unprivileged socket API is nonsense: only the root or physically local
|
| /Documentation/ABI/testing/ |
| D | sysfs-class-chromeos-driver-cros-ec-lightbar | 15 and other system hardware. To prevent unprivileged users
|
| D | sysfs-class-rtc | 36 (RW) The maximum interrupt rate an unprivileged user may request
|
| /Documentation/infiniband/ |
| D | user_verbs.rst | 55 unprivileged processes do not exceed their RLIMIT_MEMLOCK limit.
|
| /Documentation/filesystems/ |
| D | fuse.rst | 298 an unprivileged user - normally restricted from mounting with
302 processes in user namespaces where they're unprivileged. For this
365 Since we are talking about unprivileged userspace programs,
|
| D | journalling.rst | 132 if you allow unprivileged userspace to trigger codepaths containing
|
| /Documentation/admin-guide/sysctl/ |
| D | kernel.rst | 255 This toggle indicates whether unprivileged users are prevented
500 -EPERM) for unprivileged processes not in the io_uring_group group.
569 unprivileged users.
575 if leaking kernel pointer values to unprivileged users is a concern.
954 Controls use of the performance events system by unprivileged
1447 systems, large numbers of split locks from unprivileged users can result in
1618 Writing 1 to this entry will disable unprivileged calls to ``bpf()``;
1623 Writing 2 to this entry will also disable unprivileged calls to ``bpf()``,
1631 0 Unprivileged calls to ``bpf()`` are enabled
1632 1 Unprivileged calls to ``bpf()`` are disabled without recovery
[all …]
|
| D | net.rst | 104 - 1 - enable JIT hardening for unprivileged users only
128 compiler in order to reject unprivileged JIT requests once it has
234 packet contents. If disabled, transmit timestamp requests from unprivileged
|
| /Documentation/admin-guide/hw-vuln/ |
| D | gather_data_sampling.rst | 6 Gather Data Sampling is a hardware vulnerability which allows unprivileged
|
| D | tsx_async_abort.rst | 6 TAA is a hardware vulnerability that allows unprivileged speculative access to
72 Attacks against the TAA vulnerability can be implemented from unprivileged
|
| D | special-register-buffer-data-sampling.rst | 58 An unprivileged user can extract values returned from RDRAND and RDSEED
|
| /Documentation/core-api/ |
| D | dma-attributes.rst | 128 accesses to DMA buffers in both privileged "supervisor" and unprivileged
|
| /Documentation/accounting/ |
| D | psi.rst | 108 Unprivileged users can also create monitors, with the only limitation that the
|
| /Documentation/networking/ |
| D | tuntap.rst | 60 unprivileged users, then you need the /dev/net/tun device to be usable by
|
| /Documentation/arch/x86/ |
| D | mds.rst | 160 2. For an unprivileged user, there is no known way to make that NMI
|
12