Re: [PATCH] pidfd: Stop taking cred_guard_mutex

Kees Cook
2020-03-11T18:49:59Z

On Tue, Mar 10, 2020 at 03:57:35PM -0500, Eric W. Biederman wrote:
> So ptrace_attach and seccomp use the cred_guard_mutex to guarantee
> a deadlock.

Well, that's the result, but seccomp uses it because it wants to
be certain that credentials and no_new_privs are changed together
"atomically".

--
Kees Cook