On Wed, 2021-12-01 at 17:09 -0500, Stefan Berger wrote:
On 12/1/21 17:01, James Bottomley wrote:use for me is first event that gets logged in the new namespace.
I don't see this because my setup for everything is triggered offWhat could trigger that? A callback while mounting - but I am not
the first use of the IMA namespace. You'd need to have some type
of lazy setup of the inodes as well to give unshare time to install
the uid/gidmappings.
sure where to hook into then. What is your mechanisms to trigger as
the 'first use of the IMA namespace'? What is 'use' here?
However, I don't think this is a good trigger, it's just a random thing
I was playing with. Perhaps trigger on mount is a good one ... that
could be done from securityfs_ns_init_fs_context?
James