Re: [RFC PATCH v2 5/6] kernel: add KAP checks for unshare and setns

Check unshare and setns against the bound task's authority. Neither
has an LSM hook, so they call KAP directly. Every namespace type is
checked, and setns checks the type of the namespace it is given.

Unbound tasks are not checked.

Assisted-by: Claude
Co-developed-by: HARIHARA SUDHAN. R <redacted>
Signed-off-by: HARIHARA SUDHAN. R <redacted>
Assisted-by: Codex
Signed-off-by: Ketan Bhardwaj <redacted>

Sashiko has reviewed this patch and found no issues.

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20261028133335.75899-1-ketan@armoriq.io?part=5