# \[RFC PATCH 4/4\] fuse: define the filesystem as untrusted - From: Mimi Zohar \ - Date: 2018-02-14 13:36:03 - List: linux-security-module - Page: https://ratatoskr.run/linux-security-module/2018/02/132607 - Thread: https://ratatoskr.run/linux-security-module/2018/02/132713/t.md ```text Files on FUSE can change at any point in time without notifying the kernel. This patch sets the new fs_type flag FS_UNTRUSTED to indicate that the filesystem is untrusted. (This patch is based on Alban Crequy's use of fs_flags.) Signed-off-by: Mimi Zohar Cc: Miklos Szeredi Cc: Seth Forshee Cc: Eric W. Biederman Cc: Dongsu Park Cc: Alban Crequy Cc: "Serge E. Hallyn" --- fs/fuse/inode.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/fuse/inode.c b/fs/fuse/inode.c index 624f18bbfd2b..dad65a3c7388 100644 --- a/fs/fuse/inode.c +++ b/fs/fuse/inode.c @@ -1205,7 +1205,7 @@ static void fuse_kill_sb_anon(struct super_block *sb) static struct file_system_type fuse_fs_type = { .owner = THIS_MODULE, .name = "fuse", - .fs_flags = FS_HAS_SUBTYPE, + .fs_flags = FS_HAS_SUBTYPE | FS_UNTRUSTED, .mount = fuse_mount, .kill_sb = fuse_kill_sb_anon, }; -- 2.7.5 -- To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to majordomo at vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html ```