Skip to content

Commit 0d50f05

Browse files
committed
selinux: provide a "no sooner than" date for the checkreqprot removal
We marked /sys/fs/selinux/checkreqprot as deprecated in Linux v5.7, but didn't provide any guidance as to the timeframe. Considering the state of checkreqprot, it seems like one year should be enough time. Acked-by: Stephen Smalley <stephen.smalley.work@gmail.com> Signed-off-by: Paul Moore <paul@paul-moore.com>
1 parent 8861d0a commit 0d50f05

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

Documentation/ABI/obsolete/sysfs-selinux-checkreqprot

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ Description:
1515
actual protection), and Android and Linux distributions have been
1616
explicitly writing a "0" to /sys/fs/selinux/checkreqprot during
1717
initialization for some time. Support for setting checkreqprot to 1
18-
will be removed in a future kernel release, at which point the kernel
18+
will be removed no sooner than June 2021, at which point the kernel
1919
will always cease using checkreqprot internally and will always
2020
check the actual protections being applied upon mmap/mprotect calls.
2121
The checkreqprot selinuxfs node will remain for backward compatibility

0 commit comments

Comments
 (0)