On Tue, 2026-11-10 at 10:14 +0100, Christian Brauner wrote: > Initialize apparmorfs as a pseudo filesystem. This raises SB_I_PSEUDO > and > also SB_I_NOEXEC and SB_I_NODEV. apparmorfs never holds executables > or > device nodes. > > Signed-off-by: Christian Brauner (Amutable) <[email protected]>
Reviewed-by: Alexander Mikhalitsyn <[email protected]> > --- > security/apparmor/apparmorfs.c | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git a/security/apparmor/apparmorfs.c > b/security/apparmor/apparmorfs.c > index a99366467217..351ea3a7120e 100644 > --- a/security/apparmor/apparmorfs.c > +++ b/security/apparmor/apparmorfs.c > @@ -21,6 +21,7 @@ > #include <linux/rcupdate.h> > #include <linux/fs.h> > #include <linux/fs_context.h> > +#include <linux/pseudo_fs.h> > #include <linux/poll.h> > #include <linux/zstd.h> > #include <linux/string.h> > @@ -263,6 +264,7 @@ static const struct fs_context_operations > apparmorfs_context_ops = { > > static int apparmorfs_init_fs_context(struct fs_context *fc) > { > + fc_init_pseudo(fc); > fc->ops = &apparmorfs_context_ops; > return 0; > }
