Hello.
Not only AppArmor and TOMOYO but also SELinux want to use "vfsmount".

We welcome AppArmor's vfsmount patches, but I wonder why AppArmor's

vfsmount patches are not merged yet.
What prevents AppArmor's vfsmount patches from merging into -mm tree?
Regards.

Kentaro Takeda
-

Right, but one will be preferred by the community - and while I have my

own preference, I wouldn't put too much faith on that, rather talk with

the apparmor folks, look over the lkml logs for previous submissions,
I don't recall what objections remained at the last posting.  Far as I

know there may have simply been no responses due to patch fatigue.  (it

happens)
-serge

-

Thanks for your advice.

We got the same advice from Jonathan@LWN in Embedded Linux Conference 2007,

and contacted AppArmor folks but no action occurred. We'll try to contact again.
John Johansen:

Both AppArmor and TOMOYO need vfsmount in LSM hooks. Although we suggested

another solution in [TOMOYO #6], we can use AppArmor's approach.

How about submitting only vfsmount patches before submitting AppArmor/TOMOYO

main module?
We think the patches relate to not only LSM folks but also fsdevel folks.

So we are going to post the brief description of the patches to fsdevel.
Regards,

Kentaro Takeda
-