Yet another try for fs-verity
Yet another try for fs-verity
Posted Jun 4, 2019 20:32 UTC (Tue) by ebiggers (subscriber, #130760)In reply to: Yet another try for fs-verity by Cyberax
Parent article: Yet another try for fs-verity
Sure, but whenever dealing with "paths" in the kernel you have to worry about things like links and mount namespaces. And also paths aren't special; people could also ask for owner, uid, group, mode, ACL, LSM labels, encryption status etc. Support for including these fields in the fs-verity file measurement can be added later if needed. It's best to start with the core feature first, which we know is going to be used. Adding a lot of complex extra functionality early on is risky.