Re: [RFC PATCH v2 2/3] security: Add PR_CAPBSET_DROP_MASK for process-wide bounding-set drops

[Serge E. Hallyn]

On Mon, Nov 09, 2026 at 07:00:51PM +0100, Oleg Nesterov wrote:
> On 11/09, Serge E. Hallyn wrote:
> >
> > Hi Oleg,
> >
> > please see below.  Do you have any issues with this use of sighand?
> 
> Hi Serge,
> 
> I already tried to look at this patch, but sorry, can't really comment.
> 
> I'll try to take another look, but can't promise much, I don't understand
> the problem space (I could never reallly understand capabilites in details).

Thanks.  I'm mainly wondering about the storing of this pending capability
bounding mask in signal_struct, whether that might have any unexpected
side effects.