[PATCH v3 2/2] selftests/bpf: verify mount idmaps reach inode hooks
Paul Moore
paul at paul-moore.com
Fri Sep 11 18:11:38 UTC 2026
On Thu, Sep 10, 2026 at 11:25 PM Matt Bobrowski <matt at bobrowski.net> wrote:
> On Fri, Sep 04, 2026 at 04:48:56PM +0200, Daan De Meyer via B4 Relay wrote:
> > From: Daan De Meyer <daan at amutable.com>
> >
> > Extend the BPF LSM selftest to exercise create, link, symlink, mkdir,
> > mknod, and permission through both the VFS identity idmap and a real
> > idmapped tmpfs mount.
> >
> > Record the idmap observed by each hook and verify that every updated hook
> > receives the mapping used by the VFS operation. This provides regression
> > coverage for passing mount idmaps through inode security hooks.
> >
> > Signed-off-by: Daan De Meyer <daan at amutable.com>
>
> This all looks fine to me. Feel free to add:
>
> Reviewed-by: Matt Bobrowski <matt at bobrowski.net>
Thanks Matt.
--
paul-moore.com
More information about the Linux-security-module-archive
mailing list