Re: [PATCH 2/3] security: Expand task_setscheduler LSM hook to include CPU affinity mask

[Aaron Tomlin]

On Sat, May 09, 2026 at 12:48:46PM -0400, Aaron Tomlin wrote:
> @@ -3592,7 +3592,7 @@ static int cpuset_can_fork(struct task_struct *task, struct css_set *cset)
>  	if (ret)
>  		goto out_unlock;
>  
> -	ret = security_task_setscheduler(task);
> +	ret = security_task_setscheduler(task, NULL);
>  	if (ret)
>  		goto out_unlock;
>  

Apologies, we want the CPU affinity mask here too. The NULL should be
replaced with cs->effective_cpus. This will be addressed in the next
iteration.

-- 
Aaron Tomlin

Attachment: signature.asc
Description: PGP signature