On Nov 29, 2023 "Seth Forshee (DigitalOcean)" <[email protected]> wrote: > > Reading of fscaps xattrs is now done via vfs_get_fscaps(), so there is > no longer any need to do it from security_inode_getsecurity(). Remove > cap_inode_getsecurity() and its associated helpers which are now unused. > > We don't allow reading capabilities xattrs this way anyomre, so remove > the handler and associated helpers. > > Signed-off-by: Seth Forshee (DigitalOcean) <[email protected]> > --- > include/linux/security.h | 5 +- > security/commoncap.c | 132 > ----------------------------------------------- > 2 files changed, 1 insertion(+), 136 deletions(-)
Once again, you should get Serge's ACK on the commoncap.c stuff, but no objections from a LSM perspective. Acked-by: Paul Moore <[email protected]> (LSM) -- paul-moore.com
