[PATCH 1/2] configfs: move CONFIGFS_MAGIC definition to magic.h

Frederick Lawler fred at cloudflare.com
Wed Aug 19 14:39:59 UTC 2026


On Wed, Aug 19, 2026 at 02:21:58AM -0700, Breno Leitao wrote:
> On Tue, Aug 18, 2026 at 02:35:15PM -0500, Frederick Lawler wrote:
> > IMA shouldn't measure or appraise configfs, but currently does because
> > it's missing from the default exclusion policies. Move CONFIGFS_MAGIC to
> > magic.h to expose the file system's magic to IMA, as well as other userland
> > applications.
> > 
> > Suggested-by: Mimi Zohar <zohar at linux.ibm.com>
> > Signed-off-by: Frederick Lawler <fred at cloudflare.com>
> 
> Reviewed-by: Breno Leitao <leitao at debian.org>
> 
> > +#define CONFIGFS_MAGIC		0x62656570	/* some random number */
> 
> 0x62656570 is ASCII "beep", I didn't know that :-)

I can't tell if it's a better joke to leave "some random number" as the
comment, or to change the comment to the more interesting fun fact about
the number.

Best,
Fred



More information about the Linux-security-module-archive mailing list