On Thu, Sep 22, 2022 at 01:16:57PM -0400, Paul Moore wrote: > properly review the changes, but one thing immediately jumped out at > me when looking at this: why is the LSM hook > "security_inode_set_acl()" when we are passing a dentry instead of an > inode? We don't have a lot of them, but there are > `security_dentry_*()` LSM hooks in the existing kernel code. I'm no LSM expert, but isn't the inode vs dentry for if it is related to an inode operation or dentry operation, not about that the first argument is?