Re: [PATCH 1/2] yama: Make sysctl table const

From: Kees Cook
Date: Thu Jan 23 2025 - 18:20:56 EST


On Thu, Jan 23, 2025 at 04:33:34PM -0300, Ricardo B. Marliere wrote:
> Since commit 7abc9b53bd51 ("sysctl: allow registration of const struct
> ctl_table"), the sysctl registration API allows for struct ctl_table to be
> in read-only memory. Move yama_sysctl_table to be declared at build time,
> instead of having to be dynamically allocated at boot time.
>
> Cc: Thomas Weißschuh <linux@xxxxxxxxxxxxxx>
> Suggested-by: Thomas Weißschuh <linux@xxxxxxxxxxxxxx>
> Signed-off-by: Ricardo B. Marliere <rbm@xxxxxxxx>

Reviewed-by: Kees Cook <kees@xxxxxxxxxx>

--
Kees Cook