Re: [PATCH v3 1/3] ptrace: Provide ___ptrace_may_access() that can be applied on arbitrary tasks

From: Andi Kleen
Date: Wed Sep 05 2018 - 11:58:37 EST


> So, after giving it a bit more thought, I still believe "I want spectre V2
> protection" vs. "I do not care about spectre V2 on my system
> (=nospectre_v2)" are the sane options we should provide; so I'll respin v4
> of my patchset, including the ptrace check in switch_mm() (statically
> patched out on !IBPB-capable systems), and we can then later see whether
> the LSM implementation, once it exists, should be used instead.

Please if you repost include plenty of performance numbers for multi threaded
workloads. It's ridiculous to even discuss this without them.

-Andi