tjh.dev / kernel
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux
1
fork

Configure Feed

Select the types of activity you want to include in your feed.

nsfs: raise SB_I_NODEV and SB_I_NOEXEC

There's zero need for nsfs to allow device nodes or execution.

Link: https://patch.msgid.link/20251029-work-namespace-nstree-listns-v4-5-2e6f823ebdc0@kernel.org
Signed-off-by: Christian Brauner <brauner@kernel.org>

Christian Brauner 4af033da b21cba8d

+1
+1
fs/nsfs.c
··· 591 591 struct pseudo_fs_context *ctx = init_pseudo(fc, NSFS_MAGIC); 592 592 if (!ctx) 593 593 return -ENOMEM; 594 + fc->s_iflags |= SB_I_NOEXEC | SB_I_NODEV; 594 595 ctx->s_d_flags |= DCACHE_DONTCACHE; 595 596 ctx->ops = &nsfs_ops; 596 597 ctx->eops = &nsfs_export_operations;