[PATCH V4 2/2] blktrace: allow access trace file in lockdown mode
Jens Axboe
axboe at kernel.dk
Tue Apr 25 19:12:36 UTC 2023
On 4/25/23 11:55?AM, Junxiao Bi wrote:
> Any IO folks can help review this patch?
>
> Paul needs a confirm from you that the information blktrace exporting
> to userspace through the relay files are safe, not leaking information
> that userspace shouldn't know in lockdown mode.
I don't know anything about what lockdown is, but in terms of blktrace,
it is a way to trace meta data associated with IO. It'll tell you things
like "task T wants to {read,write} on device D, at offset X, and of size
Y". For passthrough IO, it'll also dump the CDB. There's never any
actual data traced.
--
Jens Axboe
More information about the Linux-security-module-archive
mailing list