From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=209.85.221.46 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1794564657; b=zKsvXGo9bVSNZEVhPpBgeK8u+GxJYGu9O5sKFNqU21tRF0jlb5F4ojQ7eIqS/Zy4KWHo fHzUAtQSRqzrliVexUyNBVr++zQDLsrZ18Zs1ZmagsXv0Xk3ZwjZOLeQhyNEqK32xI/uY skOJdlg39ggVpyMVoc3jJx6ASuJaXi6Qk+RDQctajHaMehyIeUutvI8DDLumc3aqVS4hN wvEFDBHsO4xsW8uX0DJ5fuEtiLX0S9hqY/IZU971Dz4OPbgizD5keE4rkJNUUngmvl4LH KiipBX95ZTBj0AdroWMkYOB/3m3Y0GcyAAU0IbdTQlr8mmsS+e2uMZmoLPIYKNdh8NQ== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1794564657; h=DMARC-Filter:Received:DKIM-Signature:X-Google-DKIM-Signature: X-Forwarded-Encrypted:X-Gm-Message-State:X-Gm-Gg:X-Received:Received: Message-ID:Subject:From:To:Cc:Date:In-Reply-To:References: Content-Type:Content-Transfer-Encoding:User-Agent:MIME-Version; bh=RUn5HyOzv5zK74OCIfLVACQcizuS/sHn5qpIQd0Zvv8=; b=GG6Vh8S503Ea8G1T5ESPdWZ6WhIg1qG5o8WIcLZf/Nio3N0FV+7DwvNwmjsXS9gc8GVl EWxf5DImhfV6Ps+rdW8LrTmd0G13zLvagWlczLQJy4oa5c3FD5ekkehbZC0dovlrUqhQI vwGqPTjsTk7Vuigt3LeO+dnXUsiwz+d3JtO/qIl/9E2mP4bMoboXwYIhDnOuJF0Oiv+VH zGF/qugD+IiVRKY5Ce2HoStXH7Jb0mNzvDunqCYCWiPYEuKev41iOoXf08S+OvbwNmzfz Db7UxJIEHFJRDyyhqBe38TVZ7lu+8uMA0Gl3cTaN+aUSkBXzkMZCTDT8UfMREvkp8/A== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=none header.from=amutable.com; spf=pass smtp.mailfrom=amutable.com; dkim=pass header.d=amutable-com.20260707.gappssmtp.com header.i=@amutable-com.20260707.gappssmtp.com header.a=rsa-sha256 header.s=20260707 header.b=afSYRRYW; arc=none smtp.remote-ip=209.85.221.46 Received: from mail-wr1-f46.google.com (mail-wr1-f46.google.com [209.85.221.46]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 169D2606A336 for ; Fri, 13 Nov 2026 10:10:57 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 169D2606A336 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=amutable.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=amutable.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=amutable-com.20260707.gappssmtp.com header.i=@amutable-com.20260707.gappssmtp.com header.a=rsa-sha256 header.s=20260707 header.b=afSYRRYW Received: by mail-wr1-f46.google.com with SMTP id ffacd0b85a97d-490d59c3edaso395270f8f.1 for ; Fri, 13 Nov 2026 02:10:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amutable-com.20260707.gappssmtp.com; s=20260707; t=1794564655; x=1795169455; darn=vger.kernel.org; h=mime-version:user-agent:content-transfer-encoding:content-type :references:in-reply-to:date:cc:to:from:subject:message-id:from:to :cc:subject:date:message-id:reply-to:content-type; bh=RUn5HyOzv5zK74OCIfLVACQcizuS/sHn5qpIQd0Zvv8=; b=afSYRRYW0Lzg1RjNF5a8Z8fp4FTD8+wBAkqEEgX+uXVLN6iB/1Oe+S3s3pjBsHkfPy t+OYs+BeBV0n1jEyBb10NVx3dBSZolIBqoZV0sAqk1NmAyPkc8BtADcPrCcEDzdTW4+p zgkm0FzjpTOQt7I53MJB0zmRNwJ5JPK+9oiFhFL/qPiFq6x22bgZ8fSq9Se2ho9ikF+q rg0gx4TedCmdQu2h6zCkoXcFHWmQ+ZQsRVeKTv2sVCXhncyHGZ2k8DCVvoh7926dtvhd 5w+l12l3Dd1UCqA4z70s6tomNhqNtGqcJuf3lRDB60cxVt/wNhZpOgzeegjchzcaCyfn tojQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1794564655; x=1795169455; h=mime-version:user-agent:content-transfer-encoding:content-type :references:in-reply-to:date:cc:to:from:subject:message-id:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=RUn5HyOzv5zK74OCIfLVACQcizuS/sHn5qpIQd0Zvv8=; b=RDBWU3ZP+biFuv3AzUm2m8GEEnjbP9gCC46Jxy/O6aTjxoPKslpSNZX58KxESAiRIU KsGFyk8tcbGbnNt6cMTWb2BeQ8IZcRZYISrlXPgzCS/KTWA76czQ8UnbpacdUhdWk5Gn 4iZjepV+XvM2Yew0dxRQFL1R4CFqL27inzQdSLwMhfVtPQnvSVm8cBF17RIl/hjDpPaH jMIjbZNRCOX1ahdRPQYmlhu30Fgwz3pGxpw3pvTSnKL7o425JMW4L3pWfKqV1s/30gKt IdBsq26BxVHL1vVeMCCyVPgrIXF2ue6yX1pk159Q+MqwghqRWc2wZjT/gwXDBn6fpjxM v0EQ== X-Forwarded-Encrypted: i=1; AL+hErHr0q0ngBx+uM2Vv8mrU3KChXlg9Jh9liQg97DFE6VIFJHVlErL8Ynjs+cILPLLo1tQ78fpqCZwiU1YW9o=@vger.kernel.org X-Gm-Message-State: APuU4Z/UPRtxZqm9YQRtUbLQ+RW05kbnJMtHucPvH9RRH+HsUsIJKKdF tD5nsN9rxGP2wNog5hGccGvhpVenSshgCKRvESkJBYtURQZ++C+dEvCGNFo4hblAO+le X-Gm-Gg: AYBFou0z5J4fTuqOiVIYKVR/qolQlyIXAz8CdI/WM+5vlVTaVx1mj+LX5y/PDyxjv4g 9zTIeKjbf69fs6YOAt7qKJhZMmdtafecPBlI26ii+m8CYjAvKgFPe+yGWq6B+RuzsF5/1RRNxl7 b4IfLrBUkuBqbPD9sEe9lNrKVFEi1AjEsKiBAT0ZV4aESzRSAxlPDfUWEcc4jFup9Sz7EiVEpPy ex2QMrXMwjl6EdA0JcMEokCN9kODhboAj4AzD9T93HazGVILW9ZzDwCi2jbK0LGyIdaRqkGAXtB UF/26IaobKDQAzRIDi+Z09s+1eHUvhV1bKMxUh9SEih7r1US163jGz6zIrZibcTxM6DAYbJbRrO Ce6Mo0w3ANl6n3mtA5S3j8vcIdRj9OJ0ByqzHxcyTodxM4y0lLli7EkVXRTuMbltB309MK0Xq92 AJ7mL0/bpxOcMzR5/bvVAJ1eOuHIdeHaFdWze9niStfxf0Tce7DTkTA6V4JrxNFDqimRTKS3sI8 O6gcHM3xsrJq/SVI2mwJz9o8lsa41nJUycW+IJCbpWPDzgfemYYqLdcN71X3MTIFmKLVV9wNbYf vcT56jrlmxMuNxCa76VE3oHfYN4hZL7mmAxveSt299tnrOfa4ptGdcPFIjcKS5g= X-Received: by 2002:a05:6000:470e:b0:499:ffd4:f519 with SMTP id ffacd0b85a97d-49b02d4c2cfmr11662822f8f.23.1794564655454; Fri, 13 Nov 2026 02:10:55 -0800 (PST) Received: from [10.0.0.233] (tmo-086-54.customers.d1-online.com. [80.187.86.54]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-49c5a32d336sm4988050f8f.0.2026.11.13.02.10.53 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 13 Nov 2026 02:10:55 -0800 (PST) Message-ID: <0894c601b3f3c5b92008c6c399faaa539b658307.camel@amutable.com> Subject: Re: [PATCH RFC 17/41] securityfs: use fc_init_pseudo() From: Alexander Mikhalitsyn To: Christian Brauner , linux-fsdevel@vger.kernel.org Cc: Jann Horn , Chris Mason , Josef Bacik , Christoph Hellwig , linux-block@vger.kernel.org, linux-kernel@vger.kernel.org, linux-nvme@lists.infradead.org, Alexander Viro , Jan Kara , linux-scsi@vger.kernel.org, target-devel@vger.kernel.org, driver-core@lists.linux.dev, linux-mm@kvack.org, bpf@vger.kernel.org, linux-security-module@vger.kernel.org, selinux@vger.kernel.org, apparmor@lists.ubuntu.com, linux-nfs@vger.kernel.org, netdev@vger.kernel.org, fuse-devel@lists.linux.dev, linux-efi@vger.kernel.org, xen-devel@lists.xenproject.org, ocfs2-devel@lists.linux.dev, linux-s390@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, linux-usb@vger.kernel.org, Amir Goldstein , linux-erofs@lists.ozlabs.org, linux-kselftest@vger.kernel.org Date: Fri, 13 Nov 2026 11:10:52 +0100 In-Reply-To: <20261110-work-loop-pseudo-v1-17-4c998976c6c7@kernel.org> References: <20261110-work-loop-pseudo-v1-0-4c998976c6c7@kernel.org> <20261110-work-loop-pseudo-v1-17-4c998976c6c7@kernel.org> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.56.2-0+deb13u1 X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 On Tue, 2026-11-10 at 10:14 +0100, Christian Brauner wrote: > Initialize securityfs as a pseudo filesystem. This raises SB_I_PSEUDO > and > also SB_I_NOEXEC and SB_I_NODEV. securityfs never holds executables > or > device nodes. >=20 > AppArmor puts a .null device node into securityfs but only ever opens > it via dentry_open() which doesn't care about SB_I_NODEV. >=20 > Signed-off-by: Christian Brauner (Amutable) Reviewed-by: Alexander Mikhalitsyn > --- > =C2=A0security/inode.c | 2 ++ > =C2=A01 file changed, 2 insertions(+) >=20 > diff --git a/security/inode.c b/security/inode.c > index 080402367674..93997a9f16fc 100644 > --- a/security/inode.c > +++ b/security/inode.c > @@ -14,6 +14,7 @@ > =C2=A0#include > =C2=A0#include > =C2=A0#include > +#include > =C2=A0#include > =C2=A0#include > =C2=A0#include > @@ -64,6 +65,7 @@ static const struct fs_context_operations > securityfs_context_ops =3D { > =C2=A0 > =C2=A0static int securityfs_init_fs_context(struct fs_context *fc) > =C2=A0{ > + fc_init_pseudo(fc); > =C2=A0 fc->ops =3D &securityfs_context_ops; > =C2=A0 return 0; > =C2=A0}