From: Jann Horn <jannh@google.com>
Date: Mon, 5 May 2025 21:55:06 +0200

On Mon, May 5, 2025 at 9:45 PM Kuniyuki Iwashima [off-list ref] wrote:

quoted

and LSM can check if the source socket is a kernel socket too.

("a kernel socket" is not necessarily the same as "a kernel socket
intended for core dumping")

Yes, but why we need to care about it :)

It doesn't happen or it's out-of-tree driver that is out-of-control
for us but should be in-control on the host where the service is
running.