Re: [RFC][PATCH 2/2 v3] security: Add task_settimerslack/task_gettimerslack LSM hook

2016-07-21 Thread James Morris
On Wed, 20 Jul 2016, John Stultz wrote: > On Tue, Jul 19, 2016 at 11:12 PM, James Morris wrote: > > On Mon, 18 Jul 2016, John Stultz wrote: > > > >> As requested, this patch implements a task_settimerslack and > >> task_gettimerslack LSM hooks so that the /proc//timerslack_ns > >> interface can h

Re: [RFC][PATCH 2/2 v3] security: Add task_settimerslack/task_gettimerslack LSM hook

2016-07-20 Thread John Stultz
On Tue, Jul 19, 2016 at 11:12 PM, James Morris wrote: > On Mon, 18 Jul 2016, John Stultz wrote: > >> As requested, this patch implements a task_settimerslack and >> task_gettimerslack LSM hooks so that the /proc//timerslack_ns >> interface can have finer grained security policies applied to it. >>

Re: [RFC][PATCH 2/2 v3] security: Add task_settimerslack/task_gettimerslack LSM hook

2016-07-19 Thread James Morris
On Mon, 18 Jul 2016, John Stultz wrote: > As requested, this patch implements a task_settimerslack and > task_gettimerslack LSM hooks so that the /proc//timerslack_ns > interface can have finer grained security policies applied to it. > > I've kept the CAP_SYS_NICE check in the timerslack_ns_writ

Re: [RFC][PATCH 2/2 v3] security: Add task_settimerslack/task_gettimerslack LSM hook

2016-07-18 Thread Kees Cook
On Mon, Jul 18, 2016 at 1:11 PM, John Stultz wrote: > As requested, this patch implements a task_settimerslack and > task_gettimerslack LSM hooks so that the /proc//timerslack_ns > interface can have finer grained security policies applied to it. > > I've kept the CAP_SYS_NICE check in the timersl

Re: [RFC][PATCH 2/2 v3] security: Add task_settimerslack/task_gettimerslack LSM hook

2016-07-18 Thread Serge E. Hallyn
Quoting John Stultz (john.stu...@linaro.org): > As requested, this patch implements a task_settimerslack and > task_gettimerslack LSM hooks so that the /proc//timerslack_ns > interface can have finer grained security policies applied to it. > > I've kept the CAP_SYS_NICE check in the timerslack_ns

Re: [RFC][PATCH 2/2 v3] security: Add task_settimerslack/task_gettimerslack LSM hook

2016-07-18 Thread Nick Kralevich
On Mon, Jul 18, 2016 at 1:11 PM, John Stultz wrote: > As requested, this patch implements a task_settimerslack and > task_gettimerslack LSM hooks so that the /proc//timerslack_ns > interface can have finer grained security policies applied to it. > > I've kept the CAP_SYS_NICE check in the timersl

[RFC][PATCH 2/2 v3] security: Add task_settimerslack/task_gettimerslack LSM hook

2016-07-18 Thread John Stultz
As requested, this patch implements a task_settimerslack and task_gettimerslack LSM hooks so that the /proc//timerslack_ns interface can have finer grained security policies applied to it. I've kept the CAP_SYS_NICE check in the timerslack_ns_write/show functions, as hiding it in the LSM hook seem