Messages in this thread Patch in this message | | | From | Stefan Berger <> | Subject | [PATCH v5 12/16] securityfs: Extend securityfs with namespacing support | Date | Wed, 8 Dec 2021 17:18:14 -0500 |
| |
Extend 'securityfs' for support of IMA namespacing so that each IMA (user) namespace can have its own front-end for showing the currently active policy, the measurement list, number of violations and so on.
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com> Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com> --- security/inode.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/security/inode.c b/security/inode.c index 9ba2fa875c4c..c1aef4613a17 100644 --- a/security/inode.c +++ b/security/inode.c @@ -54,7 +54,7 @@ static int securityfs_fill_super(struct super_block *sb, struct fs_context *fc) static int securityfs_get_tree(struct fs_context *fc) { - return get_tree_single(fc, securityfs_fill_super); + return get_tree_keyed(fc, securityfs_fill_super, fc->user_ns); } static const struct fs_context_operations securityfs_context_ops = { @@ -72,6 +72,7 @@ static struct file_system_type fs_type = { .name = "securityfs", .init_fs_context = securityfs_init_fs_context, .kill_sb = kill_litter_super, + .fs_flags = FS_USERNS_MOUNT, }; /** -- 2.31.1
| |