From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-dl1-f45.google.com (mail-dl1-f45.google.com [74.125.82.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 040DD3793A9 for ; Fri, 12 Jun 2026 05:55:06 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=74.125.82.45 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1781243708; cv=none; b=UgW24POOQgb6Hxw4wMY4Ga3BmpSY7lgQrBpMz9gOcjg1Gt3c7Oh0BNOWT1KgTRBkdWyQyTcks8DWVvsOC5Ec2ESaX1ExzYUKsXZYXDXvMUENgMc42+RMruzuZ+YXgZUZpT20sNUB7t6zqaNDzST1hwTVklkSxNYQnk9rVgrqiS4= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1781243708; c=relaxed/simple; bh=i+ES14b6jc5Ym5cDkSK2+zF94V9abcFm5DF3sHTzROc=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=PH7hD4CqQYQIp49e+560pfllVyfYAcJyzWEQmBUwSvBehkOBdXS5GCD4f6efXEiVwQ9uL2J2nhKqeTkq1BanvI7Qs8Q++m++6eDwB5N9EmEmqIQH6aPyHSsp7N+Vu9PvJ9HMPy+8acBbnGKgJS+47rLW7hROwFh+FwLZ856Vw/4= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=V6XZBzv6; arc=none smtp.client-ip=74.125.82.45 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="V6XZBzv6" Received: by mail-dl1-f45.google.com with SMTP id a92af1059eb24-138405b7bc5so673231c88.1 for ; Thu, 11 Jun 2026 22:55:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1781243706; x=1781848506; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=/vmc/1YG+NDtYljr9KYRnm0ette83RI3GbTlHHUsEHM=; b=V6XZBzv6igmQQxY0/btZAxLD8nY7psgpFJOs70qnfNX8XVtZwUUdCWl0Vptf4Z2sJ3 Wy4SeFVFDQ6QL+t1QqtlrV/gLZrft/6eZUww3QxUfjpn2Y1VQ5bqzVFXpsV9OXHRgqvG Xp4O645xLqagMA3eL3WqsJQXgrGBL5Pb3glRXW78JMzTvt9E+4Mxx1NOqRNubhn9Og2G ufZQpUjZa3MrFHTGkp+e6n3hnd0miTOMbjs8kIGuwxXGWGQFffpTkANjaz4L8NpWWRsQ SbydZWHa+rJlAhrky41SS3wi22MwsdKe/A/6UVpE7LhK4LcilWCX2OVRYtyd5X9cwJsU mndg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1781243706; x=1781848506; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=/vmc/1YG+NDtYljr9KYRnm0ette83RI3GbTlHHUsEHM=; b=QNTY9d9mD3moGsVh64bdnz+yEWeOLwPtc5/zw7iYv0wn1SE+6Uo+SgfUEOVPgW7lwl 9IxqWtywvZ6S2I+rjlUPlE2KbVIsJQ0rUyg76vemIem9k/1kfKMG4CTmelZFxnvcL90G yx0hnx8pBjVHS/tPQAah9k2eSENj8mw8Sp9sEzC3U2qqiZSyGsBxjylhVUWpx+AuGixf f7AYixCxocGfPcAob81TQ+YCrIIu6uZwhxcJQ9xcw1cia8+D3DzXjQFGibKSIYboAi8x snvpm3fhIbcygGbmUChorJHgK58Fgm+0sHWZJwE/T3btRxl/jn8DsazgfwLfr5FnVILR HNmQ== X-Forwarded-Encrypted: i=1; AFNElJ9JviSYXqhbQUps93WdyfNYkmuG1U1mezgZL8Gz//Zr1vckg0oZzmSAeq2pxyBwUa0MiGT3WsUqPfqWKJc=@vger.kernel.org X-Gm-Message-State: AOJu0Yy3W+R6MIZEF8T3gbb0QDsxt7tHI8GD+j/jVc9x75OubAkgS845 DOh1L4dxVe1gLTL0R0WzB1uSolLJ1NuYazRbbFISkjX1KZRzPZ7xLTcL0animg== X-Gm-Gg: Acq92OGPEy/nKJ1JcnHrqc90WMnmwSWfETl+ZK78YPlL3ZkmtCWwniJ32lHYT2F4ELw Sx/ID0PdeFme+MeoXXO2ndLrNxLxRMpGKrNdEyk9aEtmhfdKpxqynKvP/dC3R3XyTWRrPiKacUE CLb0y8FGAHlUi+t2MbLiiP4JQOuA/LiCgWwtUW+TBUZdqejDKUcEaDc+DQWLRwrreO1Cx9zlbs2 xVOuoAmEwR4px1qRzUyZ56NRPKIeY8p2qSFbt1VXKdMXDfKbQu8WMHs2qEOiq7LPzJn5XYxOQxJ UqEFWfDZXkUvKmQt0shPIkTbvHc42JOc6GNrNGUoaP7IcJcaIGT7Fr0OYwp/WhhKeOt0Eqeasqa 2+oyGkU/4t8NxkxKV2Q1/EiDn3RIl3whUVZmf5LF8TWnWS34/TfRRs7Z2agG9gLSr8+uAFRKcyU Xl7gCeECP5AgN/mVqvp2xTu1dE0yeAtsmb X-Received: by 2002:a05:7022:ba6:b0:137:ed4b:c9b4 with SMTP id a92af1059eb24-1384bb7fba5mr557149c88.28.1781243705892; Thu, 11 Jun 2026 22:55:05 -0700 (PDT) Received: from linux-691t.suse.cz ([124.11.22.254]) by smtp.gmail.com with ESMTPSA id a92af1059eb24-1384b964853sm1075173c88.11.2026.06.11.22.55.03 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 11 Jun 2026 22:55:05 -0700 (PDT) From: Chun-Yi Lee X-Google-Original-From: Chun-Yi Lee To: "Rafael J . Wysocki" Cc: Chun-Yi Lee , David Howells , Lorenzo Stoakes , Andy Shevchenko , Thomas Gleixner , Matthew Garrett , Greg Kroah-Hartman , Danilo Krummrich , driver-core@lists.linux.dev, linux-kernel@vger.kernel.org Subject: [PATCH] debugfs: Fix lockdown check for mmap_prepare Date: Fri, 12 Jun 2026 13:54:55 +0800 Message-ID: <20260612055455.16894-1-jlee@suse.com> X-Mailer: git-send-email 2.43.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Commit 651fdda8406d ("relay: update relay to use mmap_prepare") changed the `mmap` file operation to `mmap_prepare` for relayfs, but the lockdown check in debugfs was not updated accordingly. This prevents debugfs from being locked down when the kernel is in integrity mode if a file uses `mmap_prepare` but not `mmap`. Update the lockdown check to look for `mmap_prepare` instead of `mmap` to fix this. Fixes: 651fdda8406d ("relay: update relay to use mmap_prepare") Signed-off-by: Chun-Yi Lee Cc: David Howells Cc: Lorenzo Stoakes cc: Andy Shevchenko cc: Thomas Gleixner Cc: Rafael J. Wysocki Cc: Matthew Garrett Cc: Greg Kroah-Hartman Cc: Danilo Krummrich Cc: driver-core@lists.linux.dev Cc: linux-kernel@vger.kernel.org --- fs/debugfs/file.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fs/debugfs/file.c b/fs/debugfs/file.c index edd6aafbfbaa..d5e187895dd8 100644 --- a/fs/debugfs/file.c +++ b/fs/debugfs/file.c @@ -273,7 +273,7 @@ static int debugfs_locked_down(struct inode *inode, (!real_fops || (!real_fops->unlocked_ioctl && !real_fops->compat_ioctl && - !real_fops->mmap))) + !real_fops->mmap_prepare))) return 0; if (security_locked_down(LOCKDOWN_DEBUGFS)) -- 2.43.0