Documentation/admin-guide/perf-security.rst

7 --------
29 3. Content of kernel software counters (e.g., for context switches, page
34    uncore counters) without direct attribution to any execution context
37 4. Content of architectural execution context registers (e.g., RIP, RSP,
44 of execution context registers or data from process memory then access
50 -------------------------------
66 independently enabled and disabled on per-thread basis for processes and
100 ---------------------------------
102 Mechanisms of capabilities, privileged capability-dumb files [6]_ and
115    # ls -alhF
116    -rwxr-xr-x  2 root root  11M Oct 19 15:12 perf
118    # ls -alhF
119    -rwxr-xr-x  2 root perf_users  11M Oct 19 15:12 perf
120    # chmod o-rwx perf
121    # ls -alhF
122    -rwxr-x---  2 root perf_users  11M Oct 19 15:12 perf
131    # setcap -v "cap_perfmon,cap_sys_ptrace,cap_syslog=ep" perf
144 'perf top', alternatively use 'perf top -m N', to reduce the memory that
153   # perf top -e cycles
167 -----------------------------------
172 -1:
174      performance monitoring. Per-user per-cpu perf_event_mlock_kb [2]_
181      *scope* includes per-process and system wide performance monitoring
185      analysis. Per-user per-cpu perf_event_mlock_kb locking limit is
190      *scope* includes per-process performance monitoring only and
193      monitored and captured for later analysis. Per-user per-cpu
198      *scope* includes per-process performance monitoring only. CPU and
200      monitored and captured for later analysis. Per-user per-cpu
205 ---------------------------------
211 every configured PMU event. Open file descriptors are a per-process
213 (ulimit -n), which is usually derived from the login shell process. When
216 configuration. RLIMIT_NOFILE limit can be increased on per-user basis
228 per-cpu limits of memory allowed for mapping by the user processes to
235 4128 KiB of memory above the RLIMIT_MEMLOCK limit (ulimit -l) for
239 monitoring processes, for example, using the --mmap-pages Perf record
251 ------------
254 .. [2] `<http://man7.org/linux/man-pages/man2/perf_event_open.2.html>`_
258 .. [6] `<http://man7.org/linux/man-pages/man7/capabilities.7.html>`_
259 .. [7] `<http://man7.org/linux/man-pages/man2/ptrace.2.html>`_
261 .. [9] `<https://en.wikipedia.org/wiki/Model-specific_register>`_
262 .. [10] `<http://man7.org/linux/man-pages/man5/acl.5.html>`_
263 .. [11] `<http://man7.org/linux/man-pages/man2/getrlimit.2.html>`_
264 .. [12] `<http://man7.org/linux/man-pages/man5/limits.conf.5.html>`_
266 .. [14] `<http://man7.org/linux/man-pages/man8/auditd.8.html>`_