On Mon, Oct 9, 2017 at 4:10 PM, David Miller <da...@davemloft.net> wrote: > Shmulik Ladkani (1): > netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'
This adds a new user of set_fs(), which we're trying to eliminate (or at least not expand): + set_fs(KERNEL_DS); + fd = bpf_obj_get_user(path); + set_fs(oldfs); Can you please adjust this to not make set_fs() changes? Thanks! -Kees -- Kees Cook Pixel Security
