Re: [PATCH v2] debugfs: Fix lockdown check for mmap_prepare
From: joeyli
Date: Mon Jun 15 2026 - 10:54:21 EST
On Mon, Jun 15, 2026 at 12:18:29PM +0100, Lorenzo Stoakes wrote:
> On Mon, Jun 15, 2026 at 06:47:50PM +0800, Chun-Yi Lee wrote:
> > From: Chun-Yi Lee <jlee@xxxxxxxx>
> >
> > Commit 651fdda8406d ("relay: update relay to use mmap_prepare")
> > changed the `mmap` file operation to `mmap_prepare` for relayfs, but
> > the lockdown check in debugfs was not updated accordingly.
> >
> > This prevents debugfs from being locked down when the kernel is in
> > integrity mode if a file uses `mmap_prepare` but not `mmap`.
> >
> > Since the conversion to `mmap_prepare` across the kernel is not yet
> > complete, update the lockdown check to look for both `mmap` and
> > `mmap_prepare` to ensure comprehensive coverage.
> >
> > Fixes: 651fdda8406d ("relay: update relay to use mmap_prepare")
> > Signed-off-by: Chun-Yi Lee <jlee@xxxxxxxx>
>
> LGTM so:
>
> Reviewed-by: Lorenzo Stoakes <ljs@xxxxxxxxxx>
>
Thanks for Lorenzo's review!
Joey Lee