[PATCH v3 2/2] selftests/bpf: verify mount idmaps reach inode hooks
Matt Bobrowski
matt at bobrowski.net
Tue Sep 8 23:20:46 UTC 2026
On Tue, Sep 08, 2026 at 06:22:31PM -0400, Paul Moore wrote:
> On Fri, Sep 4, 2026 at 10:48 AM Daan De Meyer via B4 Relay
> <devnull+daan.amutable.com at kernel.org> wrote:
> >
> > From: Daan De Meyer <daan at amutable.com>
> >
> > Extend the BPF LSM selftest to exercise create, link, symlink, mkdir,
> > mknod, and permission through both the VFS identity idmap and a real
> > idmapped tmpfs mount.
> >
> > Record the idmap observed by each hook and verify that every updated hook
> > receives the mapping used by the VFS operation. This provides regression
> > coverage for passing mount idmaps through inode security hooks.
> >
> > Signed-off-by: Daan De Meyer <daan at amutable.com>
> > ---
> > tools/testing/selftests/bpf/prog_tests/test_lsm.c | 231 ++++++++++++++++++++++
> > tools/testing/selftests/bpf/progs/lsm.c | 79 ++++++++
> > 2 files changed, 310 insertions(+)
>
> Do any of the BPF LSM folks want to review/ACK this patch from Daan?
Sure, will take a look this evening.
More information about the Linux-security-module-archive
mailing list