Re: [PATCH v5] vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing
From: Al Viro <viro@zeniv.linux.org.uk>
Date: 2022-11-19 08:49:19
Also in:
linux-fsdevel, linux-nfs, lkml, selinux
On Thu, Nov 10, 2022 at 11:09:27AM +0000, David Howells wrote:
When NFS superblocks are created by automounting, their LSM parameters aren't set in the fs_context struct prior to sget_fc() being called, leading to failure to match existing superblocks. Fix this by adding a new LSM hook to load fc->security for submount creation when alloc_fs_context() is creating the fs_context for it.
FWIW, it feels like security_sb_mnt_opts_compat() would be a saner place for that. It would need to get struct dentry *reference passed to it, but that should be it...