[PATCH] ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()

Paul Moore paul at paul-moore.com
Sun Feb 22 20:44:27 UTC 2026


On Sun, Feb 22, 2026 at 2:58 PM Andrew Morton <akpm at linux-foundation.org> wrote:
>
> On Tue, 27 Jan 2026 17:09:40 -0500 Paul Moore <paul at paul-moore.com> wrote:
>
> > > > > > Fixes: dbec28460a89 ("userns: Add per user namespace sysctls.")
> > > > > > Signed-off-by: Ondrej Mosnacek <omosnace at redhat.com>
> > > > > > ---
> > > > > >  kernel/ucount.c | 2 +-
> > > > > >  1 file changed, 1 insertion(+), 1 deletion(-)
> > > > >
> > > > > Reviewed-by: Paul Moore <paul at paul-moore.com>
> > > >
> > > > Acked-by: Serge Hallyn <serge at hallyn.com>
> > > >
> > > > Looks good to me.  What tree should this go through?  Network?
> > >
> > > Andrew has already applied the two patches I posted into his
> > > mm-nonmm-unstable branch, so I assume they are set to go through his
> > > tree.
> >
> > Andrew, any chance we can get a reply to these threads when you merge
> > a patch into your tree?
>
> I already spray out soooo much email.
>
> A better approach would be for me to become more chatty.  Reply
> "thanks, applied <reasons> <caveats> <etc>".  Shall do this.

Appreciated, thank you.

-- 
paul-moore.com



More information about the Linux-security-module-archive mailing list