On Tue, Sep 14, 2021 at 10:26 AM Casey Schaufler <casey(a)schaufler-ca.com> wrote:
On 9/13/2021 8:33 PM, Paul Moore wrote:
> From: Casey Schaufler <casey(a)schaufler-ca.com>
>
> Add Smack privilege checks for io_uring. Use CAP_MAC_OVERRIDE
> for the override_creds case and CAP_MAC_ADMIN for creating a
> polling thread. These choices are based on conjecture regarding
> the intent of the surrounding code.
>
> Signed-off-by: Casey Schaufler <casey(a)schaufler-ca.com>
> [PM: make the smack_uring_* funcs static, remove debug code]
> Signed-off-by: Paul Moore <paul(a)paul-moore.com>
You want to change the subject:
[PATCH v3 8/8] Smack: Brutalist io_uring support with debug
s/ with debug//
Thanks Casey, good catch. I updated my local copy and the
selinux/working-io_uring branch but I'll refrain from pushing a new
patchset just for this.
--
paul moore
www.paul-moore.com