On Mon, Jan 20, 2020 at 10:43 AM Stephen Smalley <stephen.smalley@xxxxxxxxx> wrote: > > On Mon, Jan 20, 2020 at 10:40 AM Stephen Smalley > <stephen.smalley@xxxxxxxxx> wrote: > > > > On Mon, Jan 20, 2020 at 7:52 AM Paul Moore <paul@xxxxxxxxxxxxxx> wrote: > > > It also looks like the fs tests Richard is working on includes tests > > > for the move_mount() so I think we are covered as far as the > > > selinux-testsuite is concerned. > > > > Not sure since those tests were just added in the latest version of > > his patches and at this point he would > > be running on kernels that lack this permission check. > > Ah, never mind - I see that he mentioned that he applied my move_mount > patch before performing those tests. > That means that there should be a test failure on kernels >= 5.2 (i.e. > that have move_mount(2)) that lack this > patch IIUC. Never mind again; he has the move_mount test under a conditional that will get updated to be specific to a kernel version if/when my patch lands.