On Fri, 30 Oct 2020 13:38:47 +0100, Mickaël Salaün wrote:
This series replaces all the use of security_capable(current_cred(), ...) with ns_capable{,_noaudit}() which set PF_SUPERPRIV.
This initially come from a review of Landlock by Jann Horn: https://lore.kernel.org/lkml/CAG48ez1FQVkt78129WozBwFbVhAPyAr9oJAHFHAbbNxEBr...
Mickaël Salaün (2): ptrace: Set PF_SUPERPRIV when checking capability seccomp: Set PF_SUPERPRIV when checking capability
[...]
Applied to for-linus/seccomp, thanks!
[1/2] ptrace: Set PF_SUPERPRIV when checking capability https://git.kernel.org/kees/c/cf23705244c9 [2/2] seccomp: Set PF_SUPERPRIV when checking capability https://git.kernel.org/kees/c/fb14528e4436