Re: [PATCH v20 1/6] exec: Add a new AT_CHECK flag to execveat(2)

"Serge E. Hallyn" <[email protected]> Sat, 12 Oct 2024 22:04:16 -0500

Newsgroups	com.openwall.lists.kernel-hardening,org.kernel.vger.linux-api,org.kernel.vger.linux-fsdevel,org.kernel.vger.linux-integrity,org.kernel.vger.linux-kernel,org.kernel.vger.linux-security-module
Message-ID	<[email protected]>

On Fri, Oct 11, 2024 at 08:44:17PM +0200, MickaÃ«l SalaÃ¼n wrote:
> Add a new AT_CHECK flag to execveat(2) to check if a file would be

Apologies for both bikeshedding and missing earlier discussions.

But AT_CHECK sounds quite generic.  How about AT_EXEC_CHECK, or
AT_CHECK_EXEC_CREDS?  (I would suggest just AT_CHECK_CREDS since
it's for use in execveat(2), but as it's an AT_ flag, it's
probably worth being more precise).