Re: [PATCH] ima: define new policy condition based on the filesystem name

From: Christoph Hellwig
Date: Mon Jan 15 2018 - 12:19:20 EST


On Mon, Jan 15, 2018 at 11:40:07AM -0500, Mimi Zohar wrote:
> rootfs IS different than other filesystems, as other filesystems
> uniquely identify the underlying filesystem type.  rootfs can be a
> ramfs or tmpfs filesystem.  Only tmpfs supports xattrs.

Tons of filesystems only have xattrs optionally. Check for goddamn
xattrs if that is the requirement and not a name that has absolutely
zero meaning for functionality. That is the whole point!