Re: [PATCH 2/3] man/man5/proc_pid_{smaps,smaps_rollup,maps}.5, man/man7/capabilities.7: CAP_PERFMON allows reading /proc/pid/{smaps,smaps_rollup,maps}

[Alejandro Colomar <alx@kernel.org>]

[-- Attachment #1: Type: text/plain, Size: 2299 bytes --]

> Date: 2026-09-12 05:32:12-0600
> From: Max Chernoff <git@maxchernoff.ca>
>
> Link: <https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0c555a3c1bc9114ad91422b941dcd29e02490687>
> Signed-off-by: Max Chernoff <git@maxchernoff.ca>

Reviewed-by: Alejandro Colomar <alx@kernel.org>


Cheers,
Alex

> ---
>  man/man5/proc_pid_maps.5  |  5 ++++-
>  man/man5/proc_pid_smaps.5 | 10 ++++++++++
>  man/man7/capabilities.7   |  9 ++++++++-
>  3 files changed, 22 insertions(+), 2 deletions(-)
> 
> diff --git a/man/man5/proc_pid_maps.5 b/man/man5/proc_pid_maps.5
> index 8783dbb3a89d..dcd455ea840c 100644
> --- a/man/man5/proc_pid_maps.5
> +++ b/man/man5/proc_pid_maps.5
> @@ -16,7 +16,10 @@
>  .BR mmap (2)
>  for some further information about memory mappings.
>  .IP
> -Permission to access this file is governed by a ptrace access mode
> +Permission to access this file is governed by
> +.B CAP_PERFMON
> +(since Linux 6.15)
> +or a ptrace access mode
>  .B PTRACE_MODE_READ_FSCREDS
>  check;
>  see
> diff --git a/man/man5/proc_pid_smaps.5 b/man/man5/proc_pid_smaps.5
> index 51440cc13bf6..d83521409375 100644
> --- a/man/man5/proc_pid_smaps.5
> +++ b/man/man5/proc_pid_smaps.5
> @@ -16,6 +16,16 @@
>  .BR pmap (1)
>  command displays similar information,
>  in a form that may be easier for parsing.)
> +.IP
> +Permission to access this file is governed by
> +.B CAP_PERFMON
> +(since Linux 6.15)
> +or a ptrace access mode
> +.B PTRACE_MODE_READ_FSCREDS
> +check;
> +see
> +.BR ptrace (2).
> +.IP
>  For each mapping there is a series of lines such as the following:
>  .IP
>  .in +4n
> diff --git a/man/man7/capabilities.7 b/man/man7/capabilities.7
> index eef074979f1b..bb8f6d9db433 100644
> --- a/man/man7/capabilities.7
> +++ b/man/man7/capabilities.7
> @@ -283,7 +283,14 @@
>  call
>  .BR perf_event_open (2);
>  .IP \[bu]
> -employ various BPF operations that have performance implications.
> +employ various BPF operations that have performance implications;
> +.IP \[bu]
> +read the contents of
> +.IR /proc/ pid /maps,
> +.IR /proc/ pid /smaps,
> +and
> +.IR /proc/ pid /smaps_rollup
> +for all processes.
>  .RE
>  .PD
>  .IP
> -- 
> 2.55.0
> 

-- 
<https://www.alejandro-colomar.es>

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]