Ingo, et al, Sorry, I am sick and can't participate this discussion right now,
On 12/04, Ingo Molnar wrote: > > * Oleg Nesterov <o...@redhat.com> wrote: > > > we really need to narrow the (huge) scope of ->cred_guard_mutex in exec > > paths. > > > > my attempt to fix this was nacked, and nobody suggested a better solution > > so far. > > Any link to your patch and the NAK? See https://lore.kernel.org/lkml/20170213141452.ga30...@redhat.com/ No questions, the patch wasn't pretty. And imo we need to rework the security hooks in the long term. Oleg.