On Monday, May 30th, 2022 at 09:09, Christian König christian.koenig@amd.com wrote:
I find a separate directory rather unusual, but can't come up with any better idea either.
IIRC the security module had a mask file with names for the supported capabilities.
Are you referring to /sys/kernel/security/lsm?
This sounds more painful to parse from user-space. Instead of a simple stat(), user-space would need to read the file, split on commas, and compare strings.