On Fri, Jul 15, 2016 at 1:03 PM, John Stultz <john.stu...@linaro.org> wrote: > On Fri, Jul 15, 2016 at 12:55 PM, Nick Kralevich <n...@google.com> wrote: >> This should also have a similar LSM check for reads. For the SELinux >> implementation, this can map to the PROCESS__GETSCHED permission. > > Ok. I'll wire that in as well. > > Would adding both selinux_task_get and set methods in the same patch > be ok? Or would folks prefer they be split into two?
I would prefer 1 patch. -- Nick Kralevich | Android Security | n...@google.com | 650.214.4037