From: Paul Moore <pmoore@xxxxxxxxxx> Date: Fri, 22 Jun 2018 17:18:20 -0400 > - const mm_segment_t old_fs = get_fs(); > - > - set_fs(KERNEL_DS); > - ret_val = ipv6_renew_options(sk, opt, newtype, > - (struct ipv6_opt_hdr __user *)newopt, > - newoptlen); > - set_fs(old_fs); So is it really the case that the traditional construct: set_fs(KERNEL_DS); ... copy_{from,to}_user(...); set_fs(old_fs); is no longer allowed? Setting fs to KERNEL_DS is supposed to make user copies work on kernel memory. Or at least it did for 20+ years :-) _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.