Skip to content

Commit

Permalink
ANDROID: restrict access to perf events
Browse files Browse the repository at this point in the history
Add:
CONFIG_SECURITY_PERF_EVENTS_RESTRICT=y

to android-base.cfg

The kernel.perf_event_paranoid sysctl is set to 3 by default.
No unprivileged use of the perf_event_open syscall will be
permitted unless it is changed.

Bug: 29054680
Change-Id: Ie7512259150e146d8e382dc64d40e8faaa438917
  • Loading branch information
jeffvanderstoep authored and Thierry Strudel committed Jun 20, 2016
1 parent 6301d0d commit 91d6204
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions android/configs/android-base.cfg
Original file line number Diff line number Diff line change
Expand Up @@ -126,6 +126,10 @@ CONFIG_PREEMPT=y
CONFIG_RESOURCE_COUNTERS=y
CONFIG_RTC_CLASS=y
CONFIG_RT_GROUP_SCHED=y
CONFIG_SECURITY=y
CONFIG_SECURITY_NETWORK=y
CONFIG_SECURITY_PERF_EVENTS_RESTRICT=y
CONFIG_SECURITY_SELINUX=y
CONFIG_STAGING=y
CONFIG_SWITCH=y
CONFIG_SYNC=y
Expand Down

0 comments on commit 91d6204

Please sign in to comment.