[systemd-devel] [PATCH] SELINUX: add /sys/fs/selinux mount point to put selinuxfs

[Greg KH]

On Wed, May 11, 2011 at 10:54:38AM -0400, Stephen Smalley wrote:
> On Wed, 2011-05-11 at 16:27 +0200, Kay Sievers wrote:
> > Just to get an idea how all this fits together. How can TPM bios and
> > IMA/AppArmor share this directory? They have their own subdirs in
> > there, or both just use the securityfs infrastructure and not their
> > own filesystem on top?
> 
> They create their own subdirs under /sys/kernel/security.
> tpm0, ima, apparmor, etc.
> They create nodes in securityfs rather than implementing their own
> pseudo filesystem type.

Then I have to ask, why is selinuxfs different here?  Does securityfs
not provide you the api you needed to implement selinuxfs on top of it
without haveing to be a separate filesystem?

thanks,

greg k-h