| commit | d9d8c93938c40e12de91650d04fceb99d92dad8a | [log] [tgz] |
|---|---|---|
| author | Casey Schaufler <casey@schaufler-ca.com> | Fri May 21 11:21:16 2021 -0700 |
| committer | Paul Moore <paul@paul-moore.com> | Sun Sep 19 22:40:51 2021 -0400 |
| tree | 9b47eec297d798926b22e80ce894e23890bd41e9 | |
| parent | 740b03414b20e7f1879cd99aae27d8c401bbcbf9 [diff] |
Smack: Brutalist io_uring support Add Smack privilege checks for io_uring. Use CAP_MAC_OVERRIDE for the override_creds case and CAP_MAC_ADMIN for creating a polling thread. These choices are based on conjecture regarding the intent of the surrounding code. Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> [PM: make the smack_uring_* funcs static, remove debug code] Signed-off-by: Paul Moore <paul@paul-moore.com>