[PATCH v3 8/8] Smack: Brutalist io_uring support with debug
Paul Moore
paul at paul-moore.com
Tue Sep 14 14:44:46 UTC 2021
On Tue, Sep 14, 2021 at 10:26 AM Casey Schaufler <casey at schaufler-ca.com> wrote:
>
> On 9/13/2021 8:33 PM, Paul Moore wrote:
> > From: Casey Schaufler <casey at schaufler-ca.com>
> >
> > Add Smack privilege checks for io_uring. Use CAP_MAC_OVERRIDE
> > for the override_creds case and CAP_MAC_ADMIN for creating a
> > polling thread. These choices are based on conjecture regarding
> > the intent of the surrounding code.
> >
> > Signed-off-by: Casey Schaufler <casey at schaufler-ca.com>
> > [PM: make the smack_uring_* funcs static, remove debug code]
> > Signed-off-by: Paul Moore <paul at paul-moore.com>
>
> You want to change the subject:
>
> [PATCH v3 8/8] Smack: Brutalist io_uring support with debug
>
> s/ with debug//
Thanks Casey, good catch. I updated my local copy and the
selinux/working-io_uring branch but I'll refrain from pushing a new
patchset just for this.
--
paul moore
www.paul-moore.com
More information about the Linux-audit
mailing list