On 29/01/2020 00:25, Christian Brauner wrote:
> I've been reading along quietly. In addition to what Jens said, to ease
> everyone's mind: pidfd_getfd() doesn't allow to unconditionally grab
> file descriptors for any task. That would be crazy. The calling task
> needs ptrace_may_access() permissions on the target task, i.e. the task
> from which you want to grab the io_uring file descriptor. And any
> calling task that has ptrace_may_access() permissions on the target can
> do much worse than just grabbing an fd.

Good to know, thanks!

-- 
Pavel Begunkov