Re: [PATCH 15/24] asus-wmi: Restrict debugfs interface when the kernel is locked down

[David Howells]

Ben Hutchings <ben@xxxxxxxxxxxxxxx> wrote:

> So it's generally not going to be OK to turn off debugfs.  There will
> probably need to be a distinction between believed-safe and unsafe
> directories/files.

Any suggestion on how to mark this distinction?  I'd prefer not to modify
every read/write op associated with a debugfs file.  Modify
DEFINE_DEBUGFS_ATTRIBUTE() maybe?  And provide lockable variants of
debugfs_create_u8() and co.?

David