On Wed, Nov 14, 2018 at 08:47:58AM -0700, Jens Axboe wrote:

Are we really worried about this as an attack surface? I get it
for other types of ops, but for mq_ops, I'd be more worried about
callers changing it inadvertently, and they still can't do that.

It isn't quite as bad as for thing like file ops, but for modern
atacks finding some piece that is easily patchable is what starts
it all.  So the less functions pointers we have that are ever
runtime writable, the better.

It's not a huge deal to me, I can drop this one for now and
revisit at a later time.

Yes, I'd be much happier if we dropped this for now.