On Tue, Jun 20, 2017 at 2:40 PM, Kees Cook <keesc...@chromium.org> wrote: > Checking for capabilities should be the last operation when performing > access control tests so that PF_SUPERPRIV is set only when it was required > for success (implying that the capability was needed for the operation). >
Reviewed-by: Andy Lutomirski <l...@kernel.org>
