[PATCH v3 8/8] Smack: Brutalist io_uring support with debug

Paul Moore paul at paul-moore.com
Tue Sep 14 14:44:46 UTC 2021


On Tue, Sep 14, 2021 at 10:26 AM Casey Schaufler <casey at schaufler-ca.com> wrote:
>
> On 9/13/2021 8:33 PM, Paul Moore wrote:
> > From: Casey Schaufler <casey at schaufler-ca.com>
> >
> > Add Smack privilege checks for io_uring. Use CAP_MAC_OVERRIDE
> > for the override_creds case and CAP_MAC_ADMIN for creating a
> > polling thread. These choices are based on conjecture regarding
> > the intent of the surrounding code.
> >
> > Signed-off-by: Casey Schaufler <casey at schaufler-ca.com>
> > [PM: make the smack_uring_* funcs static, remove debug code]
> > Signed-off-by: Paul Moore <paul at paul-moore.com>
>
> You want to change the subject:
>
>         [PATCH v3 8/8] Smack: Brutalist io_uring support with debug
>
>         s/ with debug//

Thanks Casey, good catch.  I updated my local copy and the
selinux/working-io_uring branch but I'll refrain from pushing a new
patchset just for this.

-- 
paul moore
www.paul-moore.com




More information about the Linux-audit mailing list