Re: [PATCH RFC 11/15] LSM: Infrastructure management of the mnt_opts security blob
From: Paul Moore <paul@paul-moore.com>
Date: 2025-10-14 23:12:59
Also in:
lkml, selinux
On Jun 21, 2025 Casey Schaufler [off-list ref] wrote:
Move management of the mnt_opts->security blob out of the individual security modules and into the security infrastructure. Blobs are still allocated within the modules as they are only required when mount options are present. The modules tell the infrastructure how much space is required, and the space is allocated if needed. Modules can no longer count on the presence of a blob implying that mount options specific to that module are present, so flags are added to the module specific blobs to indicate that this module has options. Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> --- security/security.c | 14 ++++----- security/selinux/hooks.c | 58 +++++++++++++++++++++++------------- security/smack/smack_lsm.c | 61 ++++++++++++++++++++++++++------------ 3 files changed, 85 insertions(+), 48 deletions(-)
We discussed this patch in a separate patchset, lore link below. https://lore.kernel.org/linux-security-module/20250925171208.5997-1-casey@schaufler-ca.com/ (local) -- paul-moore.com