Re: [kernel-hardening] Re: [PATCH 1/2] sysctl: expand use of proc_dointvec_minmax_sysadmin

From: Al Viro
Date: Sat Jan 23 2016 - 20:44:30 EST


On Sat, Jan 23, 2016 at 07:20:17PM -0600, Eric W. Biederman wrote:

> Yep. That is about the size of it. file * used to be passed to the
> sysctl methods but it was removed several years ago because no one was
> using it.

Generally cred would be better... Alternatively we could eat one more
pointer in task_struct and stash a reference to that sucker there, rather
than adding an explicit argument (again, with cred instead of file).
Not sure...