Re: [PATCH] ima: define new policy condition based on the filesystem name
From: Christoph Hellwig <hch@infradead.org>
Date: 2018-01-15 17:19:14
Also in:
linux-fsdevel, linux-security-module, lkml
On Mon, Jan 15, 2018 at 11:40:07AM -0500, Mimi Zohar wrote:
rootfs IS different than other filesystems, as other filesystems uniquely identify the underlying filesystem type. rootfs can be a ramfs or tmpfs filesystem. Only tmpfs supports xattrs.
Tons of filesystems only have xattrs optionally. Check for goddamn xattrs if that is the requirement and not a name that has absolutely zero meaning for functionality. That is the whole point!