On Tue, 2 Oct 2018 at 21:00, Jann Horn <jannh@xxxxxxxxxx> wrote: > > If this is for testing only, you can slap a capable(CAP_SYS_ADMIN) > check in here, right? I doubt it matters, but I don't really like > seeing something like this exposed to unprivileged userspace just > because you need it for kernel testing. That would mean all tests have to run as root / with CAP_SYS_ADMIN which isn't ideal. -- Lorenz Bauer | Systems Engineer 25 Lavington St., London SE1 0NZ www.cloudflare.com
