[PATCH v3 1/2] lsm: expose mount idmaps to inode hooks

[Paul Moore]

On Tue, Sep 8, 2026 at 6:27 PM Casey Schaufler <casey at schaufler-ca.com> wrote:
> On 9/8/2026 3:05 PM, Paul Moore wrote:
> > On Fri, Sep 4, 2026 at 10:48 AM Daan De Meyer via B4 Relay
> > <devnull+daan.amutable.com at kernel.org> wrote:
> >> From: Daan De Meyer <daan at amutable.com>
> >>
> >> Pass the mount idmap through the create, link, symlink, mkdir, mknod,
> >> and permission hooks. Update the in-tree security implementations and
> >> non-VFS callers accordingly.
> >>
> >> Signed-off-by: Daan De Meyer <daan at amutable.com>
> >> ---
> >>  fs/cachefiles/security.c      |  4 +--
> >>  fs/namei.c                    | 18 +++++++-------
> >>  include/linux/lsm_hook_defs.h | 23 +++++++++--------
> >>  include/linux/security.h      | 58 +++++++++++++++++++++++++------------------
> >>  security/security.c           | 40 +++++++++++++++++------------
> >>  security/selinux/hooks.c      | 19 +++++++++-----
> >>  security/smack/smack_lsm.c    |  9 ++++---
> >>  7 files changed, 100 insertions(+), 71 deletions(-)
> > Casey, are you okay with the Smack changes (below)?
>
> Yes, assuming the 80 character limit is adhered to.

I just checked and the smack_lsm.c changes all fit nicely in my
80-char wide terminal.

-- 
paul-moore.com