On Thu, Jan 29, 2026 at 06:02:00PM +0100, Vlastimil Babka wrote: > Agreed, the mmap_min_addr should stay visible and applied unconditionally. > AFAICS the only relation to SECURITY/LSM is whether CONFIG_LSM_MMAP_MIN_ADDR > is used as an additional lower limit to both CONFIG_DEFAULT_MMAP_MIN_ADDR > and the sysctl-written value?
Thanks, yeah we should probably actually move the non-LSM-relevant stuff out to mm to be honest. But that's future work, for an -rc8 hotfix we need to make the init of this particular module not dependent on normal LSM initialisation, as horrid as that is... Cheers, Lorenzo
