[PATCH v5 7/8] vfs: Replace security_sb_mount/security_move_mount with granular hooks

Song Liu song at kernel.org
Wed Jun 3 15:42:48 UTC 2026


Hi Christian,

On Thu, May 28, 2026 at 11:26 AM Song Liu <song at kernel.org> wrote:
>
> Replace the monolithic security_sb_mount() call in path_mount() and
> security_move_mount() in vfs_move_mount() with the new granular mount
> hooks:
>
> - do_loopback(): call security_mount_bind()
> - do_new_mount(): call security_mount_new()
> - do_remount(): call security_mount_remount()
> - do_reconfigure_mnt(): call security_mount_reconfigure()
> - do_move_mount_old(): call security_mount_move()
> - do_change_type(): call security_mount_change_type()
> - vfs_move_mount(): replace security_move_mount() with
>   security_mount_move()

Does this version look good to you?

Thanks,
Song



More information about the Linux-security-module-archive mailing list