On Mon, Dec 12, 2022 at 11:58:56AM +1100, Andrew Donnellan wrote:

On Wed, 2022-11-23 at 13:57 -0500, Nayna wrote:

quoted

Given there are no other exploiters for fwsecurityfs and there should
be 
no platform-specific fs, would modifying sysfs now to let userspace 
create files cleanly be the way forward? Or, if we should strongly 
consider securityfs, which would result in updating securityfs to
allow 
userspace creation of files and then expose variables via a more 
platform-specific directory /sys/kernel/security/pks? We want to pick
the best available option and would find some hints on direction
helpful 
before we develop the next patch.

Ping - it would be helpful for us to know your thoughts on this.

sysfs is not for userspace creation of files, you all know this :)

greg k-h