Re: [PATCH v2 1/1] Add a new sysctl to disable io_uring system-wide

From: Gabriel Krisman Bertazi
Date: Thu Jun 29 2023 - 14:37:31 EST


Matteo Rizzo <matteorizzo@xxxxxxxxxx> writes:

> Introduce a new sysctl (io_uring_disabled) which can be either 0, 1,
> or 2. When 0 (the default), all processes are allowed to create io_uring
> instances, which is the current behavior. When 1, all calls to
> io_uring_setup fail with -EPERM unless the calling process has
> CAP_SYS_ADMIN. When 2, calls to io_uring_setup fail with -EPERM
> regardless of privilege.
>
> Signed-off-by: Matteo Rizzo <matteorizzo@xxxxxxxxxx>
> ---

Thanks for adding the extra level for root-only rings.

The patch looks good to me.

Reviewed-by: Gabriel Krisman Bertazi <krisman@xxxxxxx>

--
Gabriel Krisman Bertazi