Re: [PATCH v13 10/12] famfs: Add runtime operation-permission (opts) framework

From: Gregory Price

Date: Sat Aug 22 2026 - 00:19:13 EST


On Fri, Aug 21, 2026 at 05:07:28PM -0700, Darrick J. Wong wrote:
>
> But what prevents a malicious program that is /not/ the famfs client
> software but has CAP_SYS_ADMIN from doing that?
>

Such a program can already unmount famfs, rebind the device to
device_dax, and mmap the whole range directly. MAP_CREATE isn't
handing it reach it didn't have.

~Gregory