Re: [PATCH v2] security: Add LSM fixup hooks to set*gid syscalls.

From: James Morris
Date: Wed Aug 01 2018 - 15:34:47 EST


On Tue, 31 Jul 2018, Micah Morton wrote:

> The ChromiumOS LSM used by ChromeOS will provide a hook for this, in
> order to enforce ChromeOS-specific policies regarding which UIDs/GIDs a
> process with CAP_SET{UID/GID} can transition to

Will you be submitting this LSM to mainline? It's a policy generally of
the kernel that we only add features to support in-tree code.


--
James Morris
<jmorris@xxxxxxxxx>