Re: [PATCH v13 10/12] famfs: Add runtime operation-permission (opts) framework
Gregory Price <[email protected]>
| Newsgroups | dev.linux.lists.fuse-devel,dev.linux.lists.nvdimm,org.kernel.vger.linux-cxl,org.kernel.vger.linux-doc,org.kernel.vger.linux-fsdevel,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <aokdSo9li0RtEt35@gourry-fedora-PF4VCD3F> |
On Fri, Aug 21, 2026 at 05:07:28PM -0700, Darrick J. Wong wrote: > > But what prevents a malicious program that is /not/ the famfs client > software but has CAP_SYS_ADMIN from doing that? > Such a program can already unmount famfs, rebind the device to device_dax, and mmap the whole range directly. MAP_CREATE isn't handing it reach it didn't have. ~Gregory