Re: [PATCH v17 05/10] fs,landlock: Support filesystem access-control

James Morris
2020-05-14T03:37:49Z

[-- Attachment #1: Type: text/plain, Size: 699 bytes --]

On Mon, 11 May 2020, Mickaël Salaün wrote:

> diff --git a/include/linux/fs.h b/include/linux/fs.h
> index 45cc10cdf6dd..2276642f8e05 100644
> --- a/include/linux/fs.h
> +++ b/include/linux/fs.h
> @@ -1517,6 +1517,11 @@ struct super_block {
> /* Pending fsnotify inode refs */
> atomic_long_t s_fsnotify_inode_refs;
>
> +#ifdef CONFIG_SECURITY_LANDLOCK
> + /* References to Landlock underlying objects */
> + atomic_long_t s_landlock_inode_refs;
> +#endif
> +

This needs to be converted to the LSM API via superblock blob stacking.

See Casey's old patch:
https://lore.kernel.org/linux-security-module/20190829232935.7099-2-casey@schaufler-ca.com/

--
James Morris
<jmorris@namei.org>