Messages in this thread | | | Date | Mon, 15 Jan 2018 08:27:26 -0800 | From | Christoph Hellwig <> | Subject | Re: [PATCH] ima: define new policy condition based on the filesystem name |
| |
On Mon, Jan 15, 2018 at 11:20:36AM -0500, Mimi Zohar wrote: > Some filesystems do not export the filesystem's magic number, as it is > considered internal, private data. In other cases, the policy rule > needs to identify a specifically mounted filesystem (eg. rootfs).
No, it doesn't. Policies based on a file system type are complete and utterly bogus. rootfs should not be treated any different from other file systems.
| |