[Bug 215676] New: fanotify Ignoring/Excluding a Directory not working with FAN_MARK_MOUNT

[Bug 215676] New: fanotify Ignoring/Excluding a Directory not working with FAN_MARK_MOUNT

[bugzilla-daemon]

https://bugzilla.kernel.org/show_bug.cgi?id=215676

            Bug ID: 215676
           Summary: fanotify Ignoring/Excluding a Directory not working
                    with FAN_MARK_MOUNT
           Product: File System
           Version: 2.5
    Kernel Version: 5.11.0-27
          Hardware: All
                OS: Linux
              Tree: Mainline
            Status: NEW
          Severity: high
          Priority: P1
         Component: ext4
          Assignee: fs_ext4@kernel-bugs.osdl.org
          Reporter: talkwithsrinivas@yahoo.co.in
        Regression: No

Created attachment 300557
  --> https://bugzilla.kernel.org/attachment.cgi?id=300557&action=edit
Test program to show directory exclusion not working

If a  process calls fanotify_mark(fd, FAN_MARK_ADD | FAN_MARK_MOUNT,
FAN_OPEN_PERM, 0, "/mountpoint") no other directory exclusions can be applied.

However a path (file) exclusion can still be applied using 

fanotify_mark(fd, FAN_MARK_ADD | FAN_MARK_IGNORED_MASK |
FAN_MARK_IGNORED_SURV_MODIFY, FAN_OPEN_PERM | FAN_CLOSE_WRITE, AT_FDCWD,
"/tmp/fio/abc");  ===> path exclusion that works.


I think the directory exclusion not working is a bug as otherwise AV solutions
cant exclude directories when using FAN_MARK_MOUNT.

I believe the change should be simple since we are already supporting path
exclusions. So we should be able to add the same for the directory inode.

-- 
You may reply to this email to add a comment.

You are receiving this mail because:
You are watching the assignee of the bug.

[Bug 215676] fanotify Ignoring/Excluding a Directory not working with FAN_MARK_MOUNT

[bugzilla-daemon]

https://bugzilla.kernel.org/show_bug.cgi?id=215676

Jan Kara (jack@suse.cz) changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jack@suse.cz
          Component|ext4                        |VFS
           Assignee|fs_ext4@kernel-bugs.osdl.or |fs_vfs@kernel-bugs.osdl.org
                   |g                           |

--- Comment #1 from Jan Kara (jack@suse.cz) ---
This is the expected behavior, although there are workarounds and possible
future improvements. More details in the email thread here:

https://lore.kernel.org/all/CAOQ4uxiDubhONM3w502anndtbqy73q_Kt5bOQ07zbATb8ndvVA@mail.gmail.com

-- 
You may reply to this email to add a comment.

You are receiving this mail because:
You are watching the assignee of the bug.