Re: root and capabilities list

2014-10-19 Thread Colin Watson
On Wed, Oct 15, 2014 at 05:11:47AM +0400, ds wrote: Anyway, there is another part, reading the msr and cpuid. For that, it seems to be really beneficial, to make it available to everyone. So the process which needs it, can only live with limited CAP_SYS_RAWIO powers. CAP_SYS_RAWIO is somewhat

Re: root and capabilities list

2014-10-15 Thread Dimitri John Ledkov
On 15 October 2014 02:11, ds 1000hz.radiow...@gmail.com wrote: On 15.10.2014 04:54, Colin Watson wrote: Martin's right - CAP_SYS_MODULE is functionally equivalent to root. I see. Anyway, there is another part, reading the msr and cpuid. For that, it seems to be really beneficial, to make

Re: root and capabilities list

2014-10-15 Thread ds
On 16.10.2014 00:53, Dimitri John Ledkov wrote: #include cpuid.h And then use __get_cpuid() for cpuid. I believe it's possible to retrieve it without being root that way. As user-space libraries use that to check if they can/cannot execute certain optimized instructions. (e.g. checking for

root and capabilities list

2014-10-14 Thread ds
Greetings! I'm trying to write a widget, which reports intel CPUs power consumption. For that, the widget needs access to /dev/cpu/.../msr, as well as ability to load kernel modules cpuid and msr. I can set CAP_SYS_RAWIO capability to get the access, but the

Re: root and capabilities list

2014-10-14 Thread Martin Pitt
Hello ds, ds [2014-10-14 21:44 +0400]: I'm trying to write a widget, which reports intel CPUs power consumption. For that, the widget needs access to /dev/cpu/.../msr, as well as ability to load kernel modules bcpuid/b and bmsr/b. I can set CAP_SYS_RAWIO capability to get the

Re: root and capabilities list

2014-10-14 Thread ds
On 14.10.2014 22:37, Martin Pitt wrote: Ah, how does that work? I'm not aware of an ELF/kernel feature which allows doing that, this sounds interesting? https://www.insecure.ws/2013/12/17/lesser-known-tool-of-the-day-getcap-setcap-and-file-capabilities/ Note that at least CAP_SYS_MODULE is

Re: root and capabilities list

2014-10-14 Thread ds
On 15.10.2014 04:54, Colin Watson wrote: Martin's right - CAP_SYS_MODULE is functionally equivalent to root. I see. Anyway, there is another part, reading the msr and cpuid. For that, it seems to be really beneficial, to make it available to everyone. So the process which needs it, can