[PATCH v3 2/2] selftests/bpf: verify mount idmaps reach inode hooks
Paul Moore
paul at paul-moore.com
Fri Sep 11 18:14:50 UTC 2026
On Fri, Sep 4, 2026 at 10:48 AM Daan De Meyer via B4 Relay
<devnull+daan.amutable.com at kernel.org> wrote:
>
> From: Daan De Meyer <daan at amutable.com>
>
> Extend the BPF LSM selftest to exercise create, link, symlink, mkdir,
> mknod, and permission through both the VFS identity idmap and a real
> idmapped tmpfs mount.
>
> Record the idmap observed by each hook and verify that every updated hook
> receives the mapping used by the VFS operation. This provides regression
> coverage for passing mount idmaps through inode security hooks.
>
> Signed-off-by: Daan De Meyer <daan at amutable.com>
> ---
> tools/testing/selftests/bpf/prog_tests/test_lsm.c | 231 ++++++++++++++++++++++
> tools/testing/selftests/bpf/progs/lsm.c | 79 ++++++++
> 2 files changed, 310 insertions(+)
Merged into lsm/dev, thanks everyone!
--
paul-moore.com
More information about the Linux-security-module-archive
mailing list