On Tue, Sep 23, 2014 at 3:01 AM, Peter Zijlstra [off-list ref] wrote:

On Tue, Sep 23, 2014 at 03:44:59PM +0800, Zefan Li wrote:

quoted

This will simplify code when we add new flags.

v3:
- Kees pointed out that no_new_privs should never be cleared, so we
shouldn't define task_clear_no_new_privs(). we define 3 macros instead
of a single one.

Thanks! This looks good to me.

quoted

v2:
- updated scripts/tags.sh, suggested by Peter.

Cc: Peter Zijlstra <redacted>
Cc: Ingo Molnar <redacted>
Cc: Miao Xie <redacted>
Cc: Kees Cook <redacted>
Cc: Tetsuo Handa <penguin-kernel-JPay3/Yim36HaxMnTkn67Xf5DAMn2ifp@public.gmane.org>
Signed-off-by: Zefan Li <redacted>

Acked-by: Peter Zijlstra (Intel) <redacted>

Acked-by: Kees Cook <redacted>

-Kees

-- 
Kees Cook
Chrome OS Security