| From: |
| Christian Brauner <brauner-AT-kernel.org> |
| To: |
| Linus Torvalds <torvalds-AT-linux-foundation.org> |
| Subject: |
| [PATCH 00/16] credentials guards: the easy cases |
| Date: |
| Mon, 03 Nov 2025 12:26:48 +0100 |
| Message-ID: |
| <20251103-work-creds-guards-simple-v1-0-a3e156839e7f@kernel.org> |
| Cc: |
| linux-fsdevel-AT-vger.kernel.org, linux-kernel-AT-vger.kernel.org, linux-aio-AT-kvack.org, linux-unionfs-AT-vger.kernel.org, linux-erofs-AT-lists.ozlabs.org, linux-nfs-AT-vger.kernel.org, linux-cifs-AT-vger.kernel.org, samba-technical-AT-lists.samba.org, cgroups-AT-vger.kernel.org, netdev-AT-vger.kernel.org, Christian Brauner <brauner-AT-kernel.org> |
| Archive-link: |
| Article |
This converts all users of override_creds() to rely on credentials
guards. Leave all those that do the prepare_creds() + modify creds +
override_creds() dance alone for now. Some of them qualify for their own
variant.
Signed-off-by: Christian Brauner <brauner@kernel.org>
---
Christian Brauner (16):
cred: add {scoped_}with_creds() guards
aio: use credential guards
backing-file: use credential guards for reads
backing-file: use credential guards for writes
backing-file: use credential guards for splice read
backing-file: use credential guards for splice write
backing-file: use credential guards for mmap
binfmt_misc: use credential guards
erofs: use credential guards
nfs: use credential guards in nfs_local_call_read()
nfs: use credential guards in nfs_local_call_write()
nfs: use credential guards in nfs_idmap_get_key()
smb: use credential guards in cifs_get_spnego_key()
act: use credential guards in acct_write_process()
cgroup: use credential guards in cgroup_attach_permissions()
net/dns_resolver: use credential guards in dns_query()
fs/aio.c | 6 +-
fs/backing-file.c | 147 ++++++++++++++++++++++---------------------
fs/binfmt_misc.c | 7 +--
fs/erofs/fileio.c | 6 +-
fs/nfs/localio.c | 59 +++++++++--------
fs/nfs/nfs4idmap.c | 7 +--
fs/smb/client/cifs_spnego.c | 6 +-
include/linux/cred.h | 12 ++--
kernel/acct.c | 6 +-
kernel/cgroup/cgroup.c | 10 ++-
net/dns_resolver/dns_query.c | 6 +-
11 files changed, 133 insertions(+), 139 deletions(-)
---
base-commit: fea79c89ff947a69a55fed5ce86a70840e6d719c
change-id: 20251103-work-creds-guards-simple-619ef2200d22
