Re: [kernel-hardening] Re: [PATCH 1/2] sysctl: expand use of proc_dointvec_minmax_sysadmin
From: Al Viro
Date: Sat Jan 23 2016 - 20:44:30 EST
On Sat, Jan 23, 2016 at 07:20:17PM -0600, Eric W. Biederman wrote:
> Yep. That is about the size of it. file * used to be passed to the
> sysctl methods but it was removed several years ago because no one was
> using it.
Generally cred would be better... Alternatively we could eat one more
pointer in task_struct and stash a reference to that sucker there, rather
than adding an explicit argument (again, with cred instead of file).
Not sure...