Someone linked to a kernel mailing list recently, I don't know if it was in a submission or in a comment. The security issue with io_uring, as I understand it,

Someone linked to a kernel mailing list recently, I don't know if it was in a submission or in a comment. The security issue with io_uring, as I understand it, is that it bypasses a lot of Linux's security auditing mechanisms. The problem is that, like with ioctl, if the kernel called out to a security subsystem with "here's something that the user wants to do with this file," the security subsystem would have to know what "something" means for every driver. Impossible; so do you allow most things? Deny them? If you choose the former, now there are gaping security holes. If you choose the latter, then enabling security will break too many things.