From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Serge E. Hallyn" Subject: Re: [PATCH 1/2] capability: export has_capability Date: Thu, 12 Jan 2017 00:45:32 -0600 Message-ID: <20170112064531.GA8577@mail.hallyn.com> References: <1482336616-19252-1-git-send-email-jike.song@intel.com> <1482336616-19252-2-git-send-email-jike.song@intel.com> <20170111134701.7d153d34@t450s.home> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Jike Song , serge@hallyn.com, linux-security-module@vger.kernel.org, kvm@vger.kernel.org, linux-kernel@vger.kernel.org, kwankhede@nvidia.com, kraxel@redhat.com To: Alex Williamson Return-path: Content-Disposition: inline In-Reply-To: <20170111134701.7d153d34@t450s.home> Sender: owner-linux-security-module@vger.kernel.org List-Id: kvm.vger.kernel.org On Wed, Jan 11, 2017 at 01:47:01PM -0500, Alex Williamson wrote: > On Thu, 22 Dec 2016 00:10:15 +0800 > Jike Song wrote: > > > has_capability() is sometimes needed by modules to test capability > > for specified task other than current, so export it. > > > > Cc: Alex Williamson > > Cc: Kirti Wankhede > > Signed-off-by: Jike Song > > --- > > kernel/capability.c | 1 + > > 1 file changed, 1 insertion(+) > > > > diff --git a/kernel/capability.c b/kernel/capability.c > > index 4984e1f..e2e198c 100644 > > --- a/kernel/capability.c > > +++ b/kernel/capability.c > > @@ -318,6 +318,7 @@ bool has_capability(struct task_struct *t, int cap) > > { > > return has_ns_capability(t, &init_user_ns, cap); > > } > > +EXPORT_SYMBOL(has_capability); > > > > /** > > * has_ns_capability_noaudit - Does a task have a capability (unaudited) > > Are we using EXPORT_SYMBOL vs EXPORT_SYMBOL_GPL here to match the other > exports in this file? We could use _GPL to match the expected caller > of this. > > > Serge, > > Do you have any comments on this patch? I'd be happy to pull it > through the vfio tree with an appropriate Ack. Thanks, Sure, thanks, looks good to me. Acked-by: Serge Hallyn