[PATCH v2 1/2] configfs: move CONFIGFS_MAGIC definition to magic.h
Mimi Zohar
zohar at linux.ibm.com
Tue Aug 25 17:49:53 UTC 2026
On Tue, 2026-08-25 at 11:47 -0500, Frederick Lawler wrote:
> Hi Breno,
>
> On Tue, Aug 25, 2026 at 07:10:02AM -0700, Breno Leitao wrote:
> > On Wed, Aug 19, 2026 at 06:45:22PM -0500, Frederick Lawler wrote:
> > > IMA shouldn't measure or appraise configfs, but currently does because
> > > it's missing from the default exclusion policies. Move CONFIGFS_MAGIC to
> > > magic.h to expose the file system's magic to IMA, as well as other userland
> > > applications.
> > >
> > > Suggested-by: Mimi Zohar <zohar at linux.ibm.com>
> > > Signed-off-by: Frederick Lawler <fred at cloudflare.com>
> >
> > Do you want this change to go thorugh the configfs tree, or the tree
> > specific for IMA?
> > ?
>
> Unless you have a user asking for it, I personally think it makes sense
> for linux-integrity to take it since the two patches are related.
>
> I don't mind spinning a v3 for integrity if you choose to take it now.
>
> Best,
> Fred
>
> PS. Sorry for not keeping the Reviewed-by tag from v1. I usually
> forget _something_ with re-spins until after the fact.
Breno, thank you for the Reviewed-by. The patch set didn't quite make it in
time for the open window, but I plan on upstreaming them. Can we change the
Reviewed-by to an Acked-by?
thanks,
Mimi
More information about the Linux-security-module-archive
mailing list