Unverified Commit d1654fd9 authored by Günther Noack's avatar Günther Noack Committed by Mickaël Salaün
Browse files

fs/ioctl: Add a comment to keep the logic in sync with LSM policies 



Landlock's IOCTL support needs to partially replicate the list of
IOCTLs from do_vfs_ioctl().  The list of commands implemented in
do_vfs_ioctl() should be kept in sync with Landlock's IOCTL policies.

Suggested-by: default avatarPaul Moore <paul@paul-moore.com>
Suggested-by: default avatarMickaël Salaün <mic@digikod.net>
Signed-off-by: default avatarGünther Noack <gnoack@google.com>
Link: https://lore.kernel.org/r/20240419161122.2023765-12-gnoack@google.com


Signed-off-by: default avatarMickaël Salaün <mic@digikod.net>
parent 943aa818

fs/ioctl.c

+3 −0
Original line number Diff line number Diff line
@@ -796,6 +796,9 @@ static int ioctl_get_fs_sysfs_path(struct file *file, void __user *argp) 
 *

 * When you add any new common ioctls to the switches above and below,

 * please ensure they have compatible arguments in compat mode.

 *

 * The LSM mailing list should also be notified of any command additions or

 * changes, as specific LSMs may be affected.

 */

static int do_vfs_ioctl(struct file *filp, unsigned int fd,

			unsigned int cmd, unsigned long arg)