On Fri, Aug 21, 2026 at 05:07:28PM -0700, Darrick J. Wong wrote: > > But what prevents a malicious program that is /not/ the famfs client > software but has CAP_SYS_ADMIN from doing that? >
Such a program can already unmount famfs, rebind the device to device_dax, and mmap the whole range directly. MAP_CREATE isn't handing it reach it didn't have. ~Gregory
