This set converts io_uring to use secure anon_inodes (with a newly allocated non-S_PRIVATE inode) for each individual instance. In addition to allowing LSM modules to enforce policy using the inode context, it also enables checkpoint/restore usecases by allowing mapping the VMA to the open fd in a task. Offset is already available to determine rings mapped per region, so this was the only missing piece in establishing region <-> io_uring instance mapping. LSM tie up has been left out of this set for now. Kumar Kartikeya Dwivedi (2): fs: anon_inodes: export anon_inode_getfile_secure helper fs: io_uring: convert to use anon_inode_getfile_secure fs/anon_inodes.c | 9 +++++++++ fs/io_uring.c | 4 ++-- include/linux/anon_inodes.h | 4 ++++ 3 files changed, 15 insertions(+), 2 deletions(-) -- 2.31.1
