Received: by 2002:a25:7ec1:0:0:0:0:0 with SMTP id z184csp1233521ybc;
        Tue, 12 Nov 2019 17:02:52 -0800 (PST)
X-Google-Smtp-Source: APXvYqx9mGg8aCSv0lRvk3F26DHbeTyBSyKLlRhEx9X7ELI+egQj6kokhboTohqcIwHVh5b1v5Yj
X-Received: by 2002:a50:e8c2:: with SMTP id l2mr780088edn.78.1573606972629;
        Tue, 12 Nov 2019 17:02:52 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1573606972; cv=none;
        d=google.com; s=arc-20160816;
        b=UitZ9F45uNzzFUGU+ukNOe0I6l+fac749q76cJa/wsOz3YMdiVagPnsQlSqflH32hF
         sh8u3ySbiarjPgYZx+4tYKf2KhMGDuGcf5EUmn9RsmwDJwQKLyRFtBYTS2P4gQYW0G1Z
         Z2HOKG/OrG4ATOK7LpAzFOkmHjQzSLu8c8qG/tU1x9zRvxkFPKxKOZ8GNNVEp4scNCUW
         8QHfX3H+0ohKSfDXZs7Mlp8kG1wGYdpgZ8t2USDjRFT9ll1i5kwkoUUwjxPMRdEtOfdd
         vecWrvuOct37R+iroTY1FE+6jeUfwrRbQc76HW0N6v+DvTTK7whfAuDy0rtXM0DjaKx6
         OizQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=list-id:precedence:sender:cc:to:subject:message-id:date:from
         :in-reply-to:references:mime-version:dkim-signature;
        bh=MilQ16RhRhXEYMpx3tFvXYXuzK4G9iEqOChqrXeNF58=;
        b=JtnXieDddDQUNlWuTVA52yXbaVscNJXBXH5FzK9WA3s/leREf8QfQELu9X6/u7r1uT
         IfEX5iZpsHRTCxnsZr7cE5yDCzXU7XqYjGDYIzKOlKyCuhP48ScL8rnvPtPhWTRl8SrY
         24wmXfBxMuaoveP2tV0FDVFolkwXd/Rr77GVKv6/skHVxpWv3Uf2gMObhBfy+EsDTWgx
         06026vpF5ryS+Rn1ZmwTyx8/K3MHXXmALhpC3hPTRGTthxjoJGlOZlFQ/XNdQtSxY8Z3
         oIZ72lbkk69kjmXVG7xN7o+rOHBArh3C4c6L08vPSZ5Fd2mQZH4lMOQONlfVrMycHGVl
         ZWSg==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@kernel.org header.s=default header.b=JJuvo9Rj;
       spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org
Return-Path: <linux-kernel-owner@vger.kernel.org>
Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67])
        by mx.google.com with ESMTP id f3si165879edx.449.2019.11.12.17.02.24;
        Tue, 12 Nov 2019 17:02:52 -0800 (PST)
Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@kernel.org header.s=default header.b=JJuvo9Rj;
       spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S1727363AbfKMA7z (ORCPT <rfc822;vipinmukundan46@gmail.com>
        + 99 others); Tue, 12 Nov 2019 19:59:55 -0500
Received: from mail.kernel.org ([198.145.29.99]:39896 "EHLO mail.kernel.org"
        rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP
        id S1726991AbfKMA7y (ORCPT <rfc822;linux-kernel@vger.kernel.org>);
        Tue, 12 Nov 2019 19:59:54 -0500
Received: from mail-vs1-f50.google.com (mail-vs1-f50.google.com [209.85.217.50])
        (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
        (No client certificate requested)
        by mail.kernel.org (Postfix) with ESMTPSA id 1907D21A49;
        Wed, 13 Nov 2019 00:59:54 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org;
        s=default; t=1573606794;
        bh=4yb7lHvzpbKW8T+vAxn8lrwtcnJIt7w1XfolQKSalHY=;
        h=References:In-Reply-To:From:Date:Subject:To:Cc:From;
        b=JJuvo9RjvuXk1csk0IjP8HgMsg3QrX+FO4QOK52XFbZ7rda76fIOFWiyhvKCJ+BEM
         fqMgQ9J9nRcO8NCM6Wr6uss6xlhl+oJebbpuDISQTaepRw5EqxggjI/lHDpRXztM1w
         ClsqQsIkzJsN2ZpAobgaX4SKMy0wZRoFcvSA+D9A=
Received: by mail-vs1-f50.google.com with SMTP id b16so203077vso.10;
        Tue, 12 Nov 2019 16:59:54 -0800 (PST)
X-Gm-Message-State: APjAAAUXof7eO2DkG2BDJ4+CczGHaLo4PexSMzbeQeHnuwEWRSPUPosq
        DWRumo16D/wO3ipllwhay1NhCUGQCI8t9CcTFR8=
X-Received: by 2002:a05:6102:302f:: with SMTP id v15mr337333vsa.122.1573606793255;
 Tue, 12 Nov 2019 16:59:53 -0800 (PST)
MIME-Version: 1.0
References: <ed51f7dd-50a2-fbf5-7ea8-4bab6d48279e@gmail.com> <20191113003524.GQ11244@42.do-not-panic.com>
In-Reply-To: <20191113003524.GQ11244@42.do-not-panic.com>
From:   Luis Chamberlain <mcgrof@kernel.org>
Date:   Tue, 12 Nov 2019 16:59:41 -0800
X-Gmail-Original-Message-ID: <CAB=NE6XNWSPQhDkGDpL_VC-4U10bGKs6K4gzzegVQR5D41+edw@mail.gmail.com>
Message-ID: <CAB=NE6XNWSPQhDkGDpL_VC-4U10bGKs6K4gzzegVQR5D41+edw@mail.gmail.com>
Subject: Re: [PATCH] proc: Allow restricting permissions in /proc/sys
To:     Topi Miettinen <toiwoton@gmail.com>
Cc:     Kees Cook <keescook@chromium.org>,
        Alexey Dobriyan <adobriyan@gmail.com>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        "open list:FILESYSTEMS (VFS and infrastructure)" 
        <linux-fsdevel@vger.kernel.org>,
        "Eric W. Biederman" <ebiederm@xmission.com>
Content-Type: text/plain; charset="UTF-8"
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

Also, while at it. Please add a test cases for all of this. There is
tools/testing/selftests/sysctl/ and the respective lib/test_sysctl.c.

  Luis