Re: [PATCH 2/4] fs: define a firmware security filesystem named fwsecurityfs

Andrew Donnellan
2022-12-12T01:00:29Z

On Wed, 2022-11-23 at 13:57 -0500, Nayna wrote:
>
> Given there are no other exploiters for fwsecurityfs and there should
> be
> no platform-specific fs, would modifying sysfs now to let userspace
> create files cleanly be the way forward? Or, if we should strongly
> consider securityfs, which would result in updating securityfs to
> allow
> userspace creation of files and then expose variables via a more
> platform-specific directory /sys/kernel/security/pks? We want to pick
> the best available option and would find some hints on direction
> helpful
> before we develop the next patch.

Ping - it would be helpful for us to know your thoughts on this.

Andrew

--
Andrew Donnellan OzLabs, ADL Canberra
ajd@linux.ibm.com IBM Australia Limited