From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 46403C77B7F for ; Mon, 23 Jun 2025 14:00:53 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id DD0B96B009F; Mon, 23 Jun 2025 10:00:52 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id D81046B00A0; Mon, 23 Jun 2025 10:00:52 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id C70F66B00B2; Mon, 23 Jun 2025 10:00:52 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0011.hostedemail.com [216.40.44.11]) by kanga.kvack.org (Postfix) with ESMTP id B39D36B009F for ; Mon, 23 Jun 2025 10:00:52 -0400 (EDT) Received: from smtpin15.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay09.hostedemail.com (Postfix) with ESMTP id 3D9888059C for ; Mon, 23 Jun 2025 14:00:52 +0000 (UTC) X-FDA: 83586826344.15.8028E1E Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) by imf24.hostedemail.com (Postfix) with ESMTP id 2EF28180016 for ; Mon, 23 Jun 2025 14:00:49 +0000 (UTC) Authentication-Results: imf24.hostedemail.com; dkim=pass header.d=infradead.org header.s=bombadil.20210309 header.b=rWrTkQhV; dmarc=none; spf=none (imf24.hostedemail.com: domain of BATV+617475e3227a0a436e26+7974+infradead.org+hch@bombadil.srs.infradead.org has no SPF policy when checking 198.137.202.133) smtp.mailfrom=BATV+617475e3227a0a436e26+7974+infradead.org+hch@bombadil.srs.infradead.org ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1750687250; a=rsa-sha256; cv=none; b=qRYiFBkCLqbHrG0jb3VxTXFVeHj35P7lpqJuyEMo4028lbGKGFjXUeMtguu7lCuRsUBnuf JYty+pdib4KBtgQ2UkpJaa4TVELjjg6QMoiWnHkl2CEo1sq34EhMybzRcR137nnuCaSeeX svwJq3qVn88HstYIgwaRG6lmdUxJ+aE= ARC-Authentication-Results: i=1; imf24.hostedemail.com; dkim=pass header.d=infradead.org header.s=bombadil.20210309 header.b=rWrTkQhV; dmarc=none; spf=none (imf24.hostedemail.com: domain of BATV+617475e3227a0a436e26+7974+infradead.org+hch@bombadil.srs.infradead.org has no SPF policy when checking 198.137.202.133) smtp.mailfrom=BATV+617475e3227a0a436e26+7974+infradead.org+hch@bombadil.srs.infradead.org ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1750687250; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:content-transfer-encoding: in-reply-to:in-reply-to:references:references:dkim-signature; bh=CVVKJvWug9C6Po7124caU+eIxZcOL4L/VyLsEo25XYs=; b=NE6zktX16D60CeZ/x2z4uHh2EInp4ycHxthQQYR2LJO6TFQVuBXZMgF37uQacsY2ampiZi zO2xIfTM0EUYUGUpdiWrfOzwtkDYtCB4Wanwd+yBWMNikJpB9jhygCRBqBJhJ+gB+Pi2aH 6Dda0MWyIebpa72aCW9p8cHZU/+A8ow= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=bombadil.20210309; h=In-Reply-To:Content-Type:MIME-Version :References:Message-ID:Subject:Cc:To:From:Date:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=CVVKJvWug9C6Po7124caU+eIxZcOL4L/VyLsEo25XYs=; b=rWrTkQhVehHTGoLhZo0zXoUGYY BEJbnShfobP4LVoW8Cs/7VoNjinPJ8u7WiKmVR4g50htoK4t6POXo1pgrFPbz0SjfZr5L+55DGtr0 OkZkVv+RiSnXYuGibOvildSr4s6VqMudpKnhS12z0mneCyLH8m2ly242dqpsoPh/PFn2TFU7biiTO otIUEOc9pNVvAKCqxTR7Zhqwz0qNIrqrinUjnX2LrbuDJTrPSQJ1WVgXG/qU/68BzL+564c6Tw1gN 8cx0wqnDRma1QBIefifvFyIKltJ3jMYq5R8DfCEfoltoDDhn+6Yz939OofxH99MvN6+XFU/atl/dC FjMFLrrQ==; Received: from hch by bombadil.infradead.org with local (Exim 4.98.2 #2 (Red Hat Linux)) id 1uThix-00000002xfr-30vK; Mon, 23 Jun 2025 14:00:39 +0000 Date: Mon, 23 Jun 2025 07:00:39 -0700 From: Christoph Hellwig To: Christian Brauner Cc: Sean Christopherson , Mike Rapoport , Vlastimil Babka , Shivank Garg , david@redhat.com, akpm@linux-foundation.org, paul@paul-moore.com, viro@zeniv.linux.org.uk, willy@infradead.org, pbonzini@redhat.com, tabba@google.com, afranji@google.com, ackerleytng@google.com, jack@suse.cz, hch@infradead.org, cgzones@googlemail.com, ira.weiny@intel.com, roypat@amazon.co.uk, linux-fsdevel@vger.kernel.org, linux-mm@kvack.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: Re: [PATCH] fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass Message-ID: References: <20250619073136.506022-2-shivankg@amd.com> <20250619-fixpunkt-querfeldein-53eb22d0135f@brauner> <20250619-ablichten-korpulent-0efe2ddd0ee6@brauner> <20250623-warmwasser-giftig-ff656fce89ad@brauner> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20250623-warmwasser-giftig-ff656fce89ad@brauner> X-SRS-Rewrite: SMTP reverse-path rewritten from by bombadil.infradead.org. See http://www.infradead.org/rpr.html X-Rspamd-Server: rspam08 X-Rspamd-Queue-Id: 2EF28180016 X-Stat-Signature: ox944sact3eef45wp8nu5xf88ha6jkam X-Rspam-User: X-HE-Tag: 1750687249-475106 X-HE-Meta: U2FsdGVkX19si2JXdQq6kS1FDUlk85OhleEo56EyZCWGMMLnvXwpiT78IU6pY10Ok8F7EnSZkdBAhTfH8X7oDfJp5j3cqxCoZ3VccYoYjAOpc3NxUXs0zXjQWhROwS0vmtb3eyOaWJFeg+IUzoakqsXHs/ZuKnT+Zuh85vSorDy63zPHrMAL9uDU7qdzgD5FdtLf/EEQTsZ6ipbmLwP+8w2E7iS798MobHgKFDBcHdo2xF27vXpqLwhtKZvNKU5uoDiYUpyqahNIPtY4eWtFc84TJDo8TPvmEntDGO8R1uMOna7jcIIijmEPNKruz3e/GO9B6kfSmI5WvbxmLoy/rhzNpetCOl4flxlP6KjUkLRbhtwuNZ2pL1Qu+vLgxgD39+hnp//g6/c/4RDoBQLK3RdLoC81M1X/HG6BRXyoq0aDmxLIQYyVm/jaw9IhjhoivnNXNhlMeHHTHGlibPfG0D+KHEQ7iph0ckMnloOfPs0eXGRdhOzwCYCp6W0PicOdEWo8pW1to2AvWy2VB84R3Qwpyi/01nLx8GlvpEOFMObcA3pwSQRowCzhhhti/bqHFwRLVEfFeGaLlF3cCC2NxBxLhJazChZibiY1P92XDlUD2aNoFc8T/SqHzPzUSi+tsP8TcJ2Z0ddhIm0trfkk1qFQMRgYCLSX1R0qE1uEBlQKeOnLhPowmLSEODjbHpFTJMLkA3oXHBoljAgjWGjgcnYaZcoMD03c1RsFu7BaL5+gsf7KBWW99Rdgs/EUinc45gSExdm53nS20mBjMGcgldeifGBP1x/1cQXxNIEmu4yuIituT2jHdqcUvoP4B7IJ0QcgsXp4daogHz1n6AKddZd7msO34jeYWQEKJrZAwe+A8zGoIB/lcD5vcK7Bp/pF3/AQWWRK+PLDeTQmsAOTK/HaGWQziOnL2EJHQpgTwZsAfNTjcIiTJ2twaXQQ8ghu23mOsfNE3FvzruvMIqk 0kKxknnx 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 X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: List-Subscribe: List-Unsubscribe: On Mon, Jun 23, 2025 at 12:16:27PM +0200, Christian Brauner wrote: > I'm more than happy to switch a bunch of our exports so that we only > allow them for specific modules. But for that we also need > EXPOR_SYMBOL_FOR_MODULES() so we can switch our non-gpl versions. Huh? Any export for a specific in-tree module (or set thereof) is by definition internals and an _GPL export if perfectly fine and expected.