Commit 3306a589 authored by Jann Horn's avatar Jann Horn Committed by Jens Axboe
Browse files

io_uring/register: fix comment about task_no_new_privs 



The actual code is right, but the comment is the wrong way around.

Fixes: ed82f35b ("io_uring: allow registration of per-task restrictions")
Signed-off-by: default avatarJann Horn <jannh@google.com>
Signed-off-by: default avatarJens Axboe <axboe@kernel.dk>
parent 531bb98a

io_uring/register.c

+2 −2
Original line number Diff line number Diff line
@@ -202,7 +202,7 @@ static int io_register_restrictions_task(void __user *arg, unsigned int nr_args) 
		return -EPERM;

	/*

	 * Similar to seccomp, disallow setting a filter if task_no_new_privs

	 * is true and we're not CAP_SYS_ADMIN.

	 * is false and we're not CAP_SYS_ADMIN.

	 */

	if (!task_no_new_privs(current) &&

	    !ns_capable_noaudit(current_user_ns(), CAP_SYS_ADMIN))
@@ -238,7 +238,7 @@ static int io_register_bpf_filter_task(void __user *arg, unsigned int nr_args) 


	/*

	 * Similar to seccomp, disallow setting a filter if task_no_new_privs

	 * is true and we're not CAP_SYS_ADMIN.

	 * is false and we're not CAP_SYS_ADMIN.

	 */

	if (!task_no_new_privs(current) &&

	    !ns_capable_noaudit(current_user_ns(), CAP_SYS_ADMIN))