On Tue, Sep 06, 2022 at 10:24:28AM +0200, Christian Brauner wrote: > I think any data that requires to be interpreteted by the VFS needs to > have dedicated methods. Seth's branch for example, tries to add > i_op->{g,s}et_vfs_caps() for vfs caps which also store ownership > information instead of hacking it through the xattr api like we do now. Yes. Although with LSMs this will become really messy, but then again creating a complete unreviewable und auditable mess is what the LSM infrastructure was created for to start with..