]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
powercap: restrict energy meter to root access
authorLen Brown <len.brown@intel.com>
Tue, 10 Nov 2020 21:00:00 +0000 (13:00 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Tue, 10 Nov 2020 20:03:57 +0000 (21:03 +0100)
commited3691aa7e4ad0a987da49b9165a22255b39e9b7
tree9d0ab4ad282bea2f046083bfc586f4bc3f78f0f5
parentad5e80d0d772cea9c08eceaceda3b30131cdaaac
powercap: restrict energy meter to root access

commit 949dd0104c496fa7c14991a23c03c62e44637e71 upstream.

Remove non-privileged user access to power data contained in
/sys/class/powercap/intel-rapl*/*/energy_uj

Non-privileged users currently have read access to power data and can
use this data to form a security attack. Some privileged
drivers/applications need read access to this data, but don't expose it
to non-privileged users.

For example, thermald uses this data to ensure that power management
works correctly. Thus removing non-privileged access is preferred over
completely disabling this power reporting capability with
CONFIG_INTEL_RAPL=n.

Fixes: 95677a9a3847 ("PowerCap: Fix mode for energy counter")
Signed-off-by: Len Brown <len.brown@intel.com>
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/powercap/powercap_sys.c