On Wed, 25 Jan 2023 16:28:49 +0100 Alexey Gladkov <legion@xxxxxxxxxx> wrote: > +config PROC_ALLOW_LIST > + bool "/proc/allowlist support" > + depends on PROC_FS > + default n > + help > + Provides a way to restrict access to certain files in procfs. Mounting I'd say "to restrict presence of files in procfs". > + procfs with subset=allowlist will add the file /proc/allowlist which > + contains a list of files and directories that should be accessed. To s/accessed/present/ > + prevent the list from being changed, the file itself must be excluded.