Re: [PATCH] security: new security_file_ioctl_compat() hook

From: Paul Moore
Date: Sun Dec 24 2023 - 15:01:13 EST


On Sat, Dec 23, 2023 at 10:34 AM Eric Biggers <ebiggers@xxxxxxxxxx> wrote:
> On Fri, Dec 22, 2023 at 08:23:26PM -0500, Paul Moore wrote:
> > Is it considered valid for a native 64-bit task to use 32-bit
> > FS_IO32_XXX flags?
>
> No, that's not valid.

Excellent, thank you.

> > If not, do we want to remove the FS_IO32_XXX flag
> > checks in selinux_file_ioctl()?
>
> I don't see any such flag checks in selinux_file_ioctl().

Neither do I ... I'm not sure what I was looking at when I made that
comment, I'm going to chalk that up to a bit of holiday fog. Sorry
for the noise.

> Is there something else you have in mind?

Nope.

--
paul-moore.com