Re: [RFC][PATCH 1/2 v2] proc: Relax /proc/<tid>/timerslack_ns capability requirements

From	Nick Kralevich <nnk@google.com>
Newsgroups	linux.kernel
Subject	Re: [RFC][PATCH 1/2 v2] proc: Relax /proc/<tid>/timerslack_ns capability requirements
Date	2016-07-15 22:30 +0200
Message-ID	<rVhUe-2YB-19@gated-at.bofh.it> (permalink)
References	<rVf62-1fR-27@gated-at.bofh.it> <rVhrc-2zQ-5@gated-at.bofh.it> <rVhAR-2Sc-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Fri, Jul 15, 2016 at 1:03 PM, John Stultz <john.stultz@linaro.org> wrote:
> On Fri, Jul 15, 2016 at 12:55 PM, Nick Kralevich <nnk@google.com> wrote:
>> This should also have a similar LSM check for reads. For the SELinux
>> implementation, this can map to the PROCESS__GETSCHED permission.
>
> Ok. I'll wire that in as well.
>
> Would adding both selinux_task_get and set methods in the same patch
> be ok? Or would folks prefer they be split into two?

I would prefer 1 patch.


-- 
Nick Kralevich | Android Security | nnk@google.com | 650.214.4037

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

[RFC][PATCH 1/2 v2] proc: Relax /proc/<tid>/timerslack_ns capability requirements John Stultz <john.stultz@linaro.org> - 2016-07-15 19:30 +0200
  Re: [RFC][PATCH 1/2 v2] proc: Relax /proc/<tid>/timerslack_ns  capability requirements Nick Kralevich <nnk@google.com> - 2016-07-15 20:00 +0200
    Re: [RFC][PATCH 1/2 v2] proc: Relax /proc/<tid>/timerslack_ns  capability requirements John Stultz <john.stultz@linaro.org> - 2016-07-15 20:50 +0200
      Re: [RFC][PATCH 1/2 v2] proc: Relax /proc/<tid>/timerslack_ns  capability requirements Kees Cook <keescook@chromium.org> - 2016-07-15 21:00 +0200
        Re: [RFC][PATCH 1/2 v2] proc: Relax /proc/<tid>/timerslack_ns  capability requirements Casey Schaufler <casey@schaufler-ca.com> - 2016-07-15 22:20 +0200
  Re: [RFC][PATCH 1/2 v2] proc: Relax /proc/<tid>/timerslack_ns  capability requirements Nick Kralevich <nnk@google.com> - 2016-07-15 22:00 +0200
    Re: [RFC][PATCH 1/2 v2] proc: Relax /proc/<tid>/timerslack_ns  capability requirements John Stultz <john.stultz@linaro.org> - 2016-07-15 22:10 +0200
      Re: [RFC][PATCH 1/2 v2] proc: Relax /proc/<tid>/timerslack_ns  capability requirements Nick Kralevich <nnk@google.com> - 2016-07-15 22:30 +0200

csiph-web