Re: [PATCH v2] lockdown,selinux: avoid bogus SELinux lockdown permission checks
From: Paul Moore
Date: Thu May 27 2021 - 10:19:10 EST
On Thu, May 27, 2021 at 12:33 AM James Morris <jmorris@xxxxxxxxx> wrote:
> On Wed, 26 May 2021, Ondrej Mosnacek wrote:
>
> > Thanks, Michael!
> >
> > James/Paul, is there anything blocking this patch from being merged?
> > Especially the BPF case is causing real trouble for people and the
> > only workaround is to broadly allow lockdown::confidentiality in the
> > policy.
>
> It would be good to see more signoffs/reviews, especially from Paul, but
> he is busy with the io_uring stuff.
Yes, it's been a busy week with various things going on around here.
I looked at the v1 posting but haven't had a chance yet to look at v2;
I promise to get to it today, but it might not happen until later
tonight.
> Let's see if anyone else can look at this in the next couple of days.
--
paul moore
www.paul-moore.com