[PATCH 00/16] credentials guards: the easy cases
Christian Brauner <[email protected]>
| Newsgroups | gmane.linux.kernel.aio.general,gmane.linux.file-systems,gmane.linux.kernel,gmane.linux.file-systems.union,gmane.linux.nfs,gmane.linux.kernel.cifs,gmane.network.samba.internals,gmane.linux.kernel.cgroups,gmane.linux.network |
|---|---|
| Message-ID | <[email protected]> |
This converts all users of override_creds() to rely on credentials guards. Leave all those that do the prepare_creds() + modify creds + override_creds() dance alone for now. Some of them qualify for their own variant. Signed-off-by: Christian Brauner <[email protected]> --- Christian Brauner (16): cred: add {scoped_}with_creds() guards aio: use credential guards backing-file: use credential guards for reads backing-file: use credential guards for writes backing-file: use credential guards for splice read backing-file: use credential guards for splice write backing-file: use credential guards for mmap binfmt_misc: use credential guards erofs: use credential guards nfs: use credential guards in nfs_local_call_read() nfs: use credential guards in nfs_local_call_write() nfs: use credential guards in nfs_idmap_get_key() smb: use credential guards in cifs_get_spnego_key() act: use credential guards in acct_write_process() cgroup: use credential guards in cgroup_attach_permissions() net/dns_resolver: use credential guards in dns_query() fs/aio.c | 6 +- fs/backing-file.c | 147 ++++++++++++++++++++++--------------------- fs/binfmt_misc.c | 7 +-- fs/erofs/fileio.c | 6 +- fs/nfs/localio.c | 59 +++++++++-------- fs/nfs/nfs4idmap.c | 7 +-- fs/smb/client/cifs_spnego.c | 6 +- include/linux/cred.h | 12 ++-- kernel/acct.c | 6 +- kernel/cgroup/cgroup.c | 10 ++- net/dns_resolver/dns_query.c | 6 +- 11 files changed, 133 insertions(+), 139 deletions(-) --- base-commit: fea79c89ff947a69a55fed5ce86a70840e6d719c change-id: 20251103-work-creds-guards-simple-619ef2200d22 -- To unsubscribe, send a message with 'unsubscribe linux-aio' in the body to [email protected]. For more info on Linux AIO, see: http://www.kvack.org/aio/ Don't email: <a href=mailto:"[email protected]">[email protected]</a>