Getting XATTRs is not particularly interesting security-wise.

Suggested-by: Steve Grubb <sgr...@redhat.com>
Fixes: a56834e0fafe ("io_uring: add fgetxattr and getxattr support")
Signed-off-by: Richard Guy Briggs <r...@redhat.com>
---
 io_uring/opdef.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/io_uring/opdef.c b/io_uring/opdef.c
index a2bf53b4a38a..f6bfe2cf078c 100644
--- a/io_uring/opdef.c
+++ b/io_uring/opdef.c
@@ -462,12 +462,14 @@ const struct io_op_def io_op_defs[] = {
        },
        [IORING_OP_FGETXATTR] = {
                .needs_file = 1,
+               .audit_skip             = 1,
                .name                   = "FGETXATTR",
                .prep                   = io_fgetxattr_prep,
                .issue                  = io_fgetxattr,
                .cleanup                = io_xattr_cleanup,
        },
        [IORING_OP_GETXATTR] = {
+               .audit_skip             = 1,
                .name                   = "GETXATTR",
                .prep                   = io_getxattr_prep,
                .issue                  = io_getxattr,
-- 
2.27.0

--
Linux-audit mailing list
Linux-audit@redhat.com
https://listman.redhat.com/mailman/listinfo/linux-audit

Reply via email to