Re: [PATCH v22 06/12] fs,security: Add sb_delete hook

On Tue, 27 Oct 2020, Mickaël Salaün wrote:

From: Mickaël Salaün <redacted>

The sb_delete security hook is called when shutting down a superblock,
which may be useful to release kernel objects tied to the superblock's
lifetime (e.g. inodes).

This new hook is needed by Landlock to release (ephemerally) tagged
struct inodes.  This comes from the unprivileged nature of Landlock
described in the next commit.

Cc: Al Viro <viro@zeniv.linux.org.uk>
Cc: James Morris <jmorris@namei.org>
Cc: Jann Horn <jannh@google.com>
Cc: Kees Cook <redacted>
Cc: Serge E. Hallyn <serge@hallyn.com>
Signed-off-by: Mickaël Salaün <redacted>

Al, Kees, JJ et al, any objections?

-- 
James Morris
[off-list ref]