[PATCH v2 1/2] configfs: move CONFIGFS_MAGIC definition to magic.h

Frederick Lawler fred at cloudflare.com
Tue Aug 25 16:47:04 UTC 2026


Hi Breno,

On Tue, Aug 25, 2026 at 07:10:02AM -0700, Breno Leitao wrote:
> On Wed, Aug 19, 2026 at 06:45:22PM -0500, Frederick Lawler wrote:
> > IMA shouldn't measure or appraise configfs, but currently does because
> > it's missing from the default exclusion policies. Move CONFIGFS_MAGIC to
> > magic.h to expose the file system's magic to IMA, as well as other userland
> > applications.
> > 
> > Suggested-by: Mimi Zohar <zohar at linux.ibm.com>
> > Signed-off-by: Frederick Lawler <fred at cloudflare.com>
> 
> Do you want this change to go thorugh the configfs tree, or the tree
> specific for IMA?
> ?

Unless you have a user asking for it, I personally think it makes sense
for linux-integrity to take it since the two patches are related.

I don't mind spinning a v3 for integrity if you choose to take it now.

Best,
Fred

PS. Sorry for not keeping the Reviewed-by tag from v1. I usually
forget _something_ with re-spins until after the fact.



More information about the Linux-security-module-archive mailing list