Provides command line interface to CMT, MBM, CAT and CDP technologies
d95f89389e
JIRA: https://redhat.atlassian.net/browse/RHEL-214424 JIRA: https://redhat.atlassian.net/browse/RHEL-214298 - New security patches (0001-0003, unrelated to the install-path patches dropped in 25.04-1): - 0001: Fix privileged file descriptor leak in rdtset Close all inherited non-stdio fds in the child process after sudo_drop() and before execvp() to prevent leaking MSR device descriptors to attacker- controlled sub-commands. - 0002: Add O_CLOEXEC to long-lived descriptor opens in lib/machine.c and lib/lock.c as defense-in-depth against fd leaks across exec boundaries Resolves: RHEL-214298 - 0003: Fix symlink race condition in pqos safe_fopen() Replace fopen() with open(O_NOFOLLOW) + fdopen() so symlink targets cannot be truncated before the post-open validation detects the symlink. Resolves: RHEL-214424 Signed-off-by: Tony Camuso <tcamuso@redhat.com> |
||
|---|---|---|
| .gitignore | ||
| 0001-rdtset-close-inherited-fds-before-execvp.patch | ||
| 0002-libpqos-add-O_CLOEXEC-to-MSR-and-lock-fd-opens.patch | ||
| 0003-pqos-safe_fopen-use-O_NOFOLLOW-to-prevent-symlink-race.patch | ||
| gating.yaml | ||
| intel-cmt-cat.spec | ||
| sources | ||