Re: [PATCH v2] perf/x86: Check data address for IBS software filter

Ingo Molnar
2025-03-19T22:18:54Z

* Namhyung Kim <namhyung@kernel.org> wrote:

> > We have two options:
> > 1) Restrict IBS + PERF_SAMPLE_RAW to privilege users.
> > 2) Remove all sensitive information from raw register dump before
> > passing it to userspace. (Kernel data addresses and all physical
> > addresses are the only sensitive info I suppose?).
> >
> > 2 is better IMO since it will allow unprivileged user to use IBS
> > with full potential. wdyt?
>
> I'm slightly inclined to #1 for simplicity and safety, but #2 is fine
> to me as well.

I'd prefer #2 for superior usability, if it doesn't get too
complicated.

Thanks,

Ingo