diff options
| author | Casey Schaufler <casey@schaufler-ca.com> | 2021-05-21 11:21:16 -0700 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2021-09-19 22:40:51 -0400 |
| commit | d9d8c93938c40e12de91650d04fceb99d92dad8a (patch) | |
| tree | 9b47eec297d798926b22e80ce894e23890bd41e9 /security/selinux | |
| parent | 740b03414b20e7f1879cd99aae27d8c401bbcbf9 (diff) | |
| download | linux-d9d8c93938c40e12de91650d04fceb99d92dad8a.tar.gz linux-d9d8c93938c40e12de91650d04fceb99d92dad8a.tar.bz2 linux-d9d8c93938c40e12de91650d04fceb99d92dad8a.zip | |
Smack: Brutalist io_uring support
Add Smack privilege checks for io_uring. Use CAP_MAC_OVERRIDE
for the override_creds case and CAP_MAC_ADMIN for creating a
polling thread. These choices are based on conjecture regarding
the intent of the surrounding code.
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
[PM: make the smack_uring_* funcs static, remove debug code]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'security/selinux')
0 files changed, 0 insertions, 0 deletions