Re: [PATCH v17 05/10] fs,landlock: Support filesystem access-control
From: James Morris <jmorris@namei.org>
Date: 2020-05-14 03:38:22
Also in:
linux-arch, linux-doc, linux-fsdevel, linux-kselftest, linux-security-module, lkml
On Mon, 11 May 2020, Mickaël Salaün wrote:
quoted hunk ↗ jump to hunk
diff --git a/include/linux/fs.h b/include/linux/fs.h index 45cc10cdf6dd..2276642f8e05 100644 --- a/include/linux/fs.h +++ b/include/linux/fs.h@@ -1517,6 +1517,11 @@ struct super_block { /* Pending fsnotify inode refs */ atomic_long_t s_fsnotify_inode_refs; +#ifdef CONFIG_SECURITY_LANDLOCK + /* References to Landlock underlying objects */ + atomic_long_t s_landlock_inode_refs; +#endif +
This needs to be converted to the LSM API via superblock blob stacking. See Casey's old patch: https://lore.kernel.org/linux-security-module/20190829232935.7099-2-casey@schaufler-ca.com/ (local) -- James Morris [off-list ref]