From: Christian Brauner Date: Thu, 4 Jun 2026 08:10:58 +0000 (+0200) Subject: Merge patch series "libfs: set SB_I_NOEXEC and SB_I_NODEV in init_pseudo()" X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=f1f63c8967be3cdb38fa44da0e2c84fd4d44f67c;p=thirdparty%2Flinux.git Merge patch series "libfs: set SB_I_NOEXEC and SB_I_NODEV in init_pseudo()" John Hubbard says: This began as a one-line dma-buf fix for a path_noexec() warning added by commit 1e7ab6f67824 ("anon_inode: rework assertions"). Christoph pointed out that the fix belongs higher up: a pseudo filesystem has no reason not to set SB_I_NOEXEC by default. This series does that. * Patch 1 sets both flags in init_pseudo(), so every pseudo filesystem gets them. This is the only patch that changes a flag, and the only one with Fixes:/Cc: stable. * Patch 2 drops the assignments that are now redundant in the callers that set them by hand. Most callers already set one or both flags. I audited every init_pseudo() caller. Here is what patch 1 actually changes for each. The only visible effect is on dma-buf, where SB_I_NOEXEC silences the warning. SB_I_NODEV is never consulted on these SB_NOUSER mounts, and none of the callers that gain SB_I_NOEXEC are executed from. caller had patch 1 adds --------------------------- -------- -------------- fs/anon_inodes.c both nothing new mm/secretmem.c both nothing new virt/kvm/guest_memfd.c both nothing new fs/nsfs.c both nothing new fs/pidfs.c both nothing new fs/aio.c NOEXEC NODEV drivers/dma-buf/dma-buf.c neither NOEXEC + NODEV net/socket.c neither NOEXEC + NODEV fs/pipe.c neither NOEXEC + NODEV kernel/resource.c neither NOEXEC + NODEV fs/erofs/super.c neither NOEXEC + NODEV fs/btrfs/tests/... neither NOEXEC + NODEV drivers/vfio/vfio_main.c neither NOEXEC + NODEV drivers/gpu/drm/drm_drv.c neither NOEXEC + NODEV drivers/dax/super.c neither NOEXEC + NODEV block/bdev.c neither NOEXEC + NODEV * patches from https://patch.msgid.link/20260604025315.245910-1-jhubbard@nvidia.com: libfs: drop redundant SB_I_NOEXEC/SB_I_NODEV in init_pseudo() callers libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo() Link: https://patch.msgid.link/20260604025315.245910-1-jhubbard@nvidia.com Signed-off-by: Christian Brauner --- f1f63c8967be3cdb38fa44da0e2c84fd4d44f67c