Matteo Rizzo <matteorizzo@xxxxxxxxxx> writes: > Introduce a new sysctl (io_uring_disabled) which can be either 0, 1, > or 2. When 0 (the default), all processes are allowed to create io_uring > instances, which is the current behavior. When 1, all calls to > io_uring_setup fail with -EPERM unless the calling process has > CAP_SYS_ADMIN. When 2, calls to io_uring_setup fail with -EPERM > regardless of privilege. > > Signed-off-by: Matteo Rizzo <matteorizzo@xxxxxxxxxx> > --- Thanks for adding the extra level for root-only rings. The patch looks good to me. Reviewed-by: Gabriel Krisman Bertazi <krisman@xxxxxxx> -- Gabriel Krisman Bertazi