Ingo, et al, Sorry, I am sick and can't participate this discussion right now,
On 12/04, Ingo Molnar wrote: > > * Oleg Nesterov <[email protected]> wrote: > > > we really need to narrow the (huge) scope of ->cred_guard_mutex in exec > > paths. > > > > my attempt to fix this was nacked, and nobody suggested a better solution > > so far. > > Any link to your patch and the NAK? See https://lore.kernel.org/lkml/[email protected]/ No questions, the patch wasn't pretty. And imo we need to rework the security hooks in the long term. Oleg.
