Re: [PATCH 0/6] File Sealing & memfd_create()

Hi

On Tue, Apr 22, 2014 at 2:44 PM, Florian Weimer fweimer@redhat.com wrote:

I didn't find that very convincing. But in v2, seals are monotonic, so checking them should be reliable enough.

Ok.

What happens when you create a loop device on a write-sealed descriptor?

Any write-back to the loop-device will fail with EPERM as soon as the fd gets write-sealed. See __do_lo_send_write() in drivers/block/loop.c. It's up to the loop-device to forward the error via bio_endio() to the caller for proper error-handling.

Thanks David