From: Jann Horn <jannh@xxxxxxxxxx> Date: Mon, 5 May 2025 21:55:06 +0200 > On Mon, May 5, 2025 at 9:45 PM Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> wrote: > > and LSM can check if the source socket is a kernel socket too. > > ("a kernel socket" is not necessarily the same as "a kernel socket > intended for core dumping") Yes, but why we need to care about it :) It doesn't happen or it's out-of-tree driver that is out-of-control for us but should be in-control on the host where the service is running.