[PATCH v4 11/16] securityfs: Only use simple_pin_fs/simple_release_fs for init_user_ns

James Bottomley James.Bottomley at HansenPartnership.com
Sat Dec 11 14:44:35 UTC 2021


On Sat, 2021-12-11 at 16:16 +0200, Jarkko Sakkinen wrote:
> On Tue, 2021-12-07 at 15:21 -0500, Stefan Berger wrote:
> > To prepare for virtualization of SecurityFS, use simple_pin_fs and
> > simpe_release_fs only when init_user_ns is active.
> > 
> > Signed-off-by: Stefan Berger <stefanb at linux.ibm.com>
> > Signed-off-by: James Bottomley <
> > James.Bottomley at HansenPartnership.com>
> 
> What do you mean by virtualization, and how does this prepare
> securityfs for it? The commit message should be way more verbose.

Heh, well cart before horse: we're still trying to work out how to do
it correctly, so we can't really document it until we've figured that
bit out.

Once that's all sorted, the output is likely something in
Documentation/ explaining how to namespace a pseudo filesystem (since
we have quite a few of them in the kernel) rather than a commit message
which will get hard to find the next time someone wants to do this.

James




More information about the Linux-security-module-archive mailing list