On Nov 29, 2023 "Seth Forshee (DigitalOcean)" <sforshee@xxxxxxxxxx> wrote: > > Reading of fscaps xattrs is now done via vfs_get_fscaps(), so there is > no longer any need to do it from security_inode_getsecurity(). Remove > cap_inode_getsecurity() and its associated helpers which are now unused. > > We don't allow reading capabilities xattrs this way anyomre, so remove > the handler and associated helpers. > > Signed-off-by: Seth Forshee (DigitalOcean) <sforshee@xxxxxxxxxx> > --- > include/linux/security.h | 5 +- > security/commoncap.c | 132 ----------------------------------------------- > 2 files changed, 1 insertion(+), 136 deletions(-) Once again, you should get Serge's ACK on the commoncap.c stuff, but no objections from a LSM perspective. Acked-by: Paul Moore <paul@xxxxxxxxxxxxxx> (LSM) -- paul-moore.com
