On Tue, Apr 30, 2024 at 11:48:29PM -0700, Christoph Hellwig wrote: > On Mon, Apr 29, 2024 at 08:30:37PM -0700, Darrick J. Wong wrote: > > From: Darrick J. Wong <djwong@xxxxxxxxxx> > > > > Create an experimental ioctl so that we can turn off fsverity. > > Didn't Eric argue against this? And if we're adding this, I think > it should be a generic feature and not just xfs specific. The tagging is a bit wrong, but it is a generic fsverity ioctl, though ext4/f2fs/btrfs don't have implementations. <shrug> According to Ted, programs that care about fsverity are supposed to check that VERITY is set in the stat data, but I imagine those programs aren't expecting it to turn off suddenly. Maybe I should make this CAP_SYS_ADMIN? Or withdraw it? --D
