Re: [RFC][PATCH 1/2 v2] proc: Relax /proc/<tid>/timerslack_ns capability requirements

[Nick Kralevich]

On Fri, Jul 15, 2016 at 1:03 PM, John Stultz <john.stultz@xxxxxxxxxx> wrote:
> On Fri, Jul 15, 2016 at 12:55 PM, Nick Kralevich <nnk@xxxxxxxxxx> wrote:
>> This should also have a similar LSM check for reads. For the SELinux
>> implementation, this can map to the PROCESS__GETSCHED permission.
>
> Ok. I'll wire that in as well.
>
> Would adding both selinux_task_get and set methods in the same patch
> be ok? Or would folks prefer they be split into two?

I would prefer 1 patch.


-- 
Nick Kralevich | Android Security | nnk@xxxxxxxxxx | 650.214.4037