Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
MIME-Version: 1.0
From:   =?UTF-8?Q?Christian_G=C3=B6ttsche?= <cgzones@googlemail.com>
Date:   Tue, 18 Jul 2023 17:32:32 +0200
Message-ID: <CAJ2a_Dd-piQ51dqptuhJ8pXm+4HrFAcdbA-ESd8YwNO3qHnJrA@mail.gmail.com>
Subject: Re: [PATCH] security: keys: perform capable check only on privileged operations
To:     Jarkko Sakkinen <jarkko@kernel.org>
Cc:     SElinux list <selinux@vger.kernel.org>,
        David Howells <dhowells@redhat.com>,
        James Morris <jmorris@namei.org>,
        "Serge E. Hallyn" <serge@hallyn.com>, keyrings@vger.kernel.org,
        linux-security-module@vger.kernel.org,
        Linux kernel mailing list <linux-kernel@vger.kernel.org>
Content-Type: text/plain; charset="UTF-8"
Precedence: bulk

On Wed, 2023-05-21 at 02:04 +0300, Jarkko Sakkinen wrote:
> On Thu, 2023-05-25 at 17:25 -0400, Paul Moore wrote:
> > > A minor inconvenience is the number of needed arguments (and the
> > > actual code after inlining should be the same to the inner scope in
> > > the end).
> >
> > Well, lucky for you, Jarkko and David maintain the keys code, not me,
> > and Jarkko seems to like your patch just fine :)
> >
> > Jarkko, I assume you'll be taking this via the keys tree?
>
> I just picked it and mirrored to linux-next.
>
> I think it is super important change because it tones down the human
> error (a little bit at least). You could say improves user experience
> kind of I guess :-)
>
> BR, Jarkko

Kindly ping; I do not see this patch applied anywhere.

Regards,
       Christian