[apparmor] Huge pages mediation class?

Zygmunt Krynicki me at zygoon.pl
Wed Nov 26 10:04:27 UTC 2025


Hello

As a part of investigation into issue affecting mmap with MAP_HUGETLB 
[1], I was thinking if huge pages should have a dedicated mediation 
class and be handled similarly to how mqueue was recently added.

In the kernel, `aa_file_perm` function could special case hugetlbfs so 
that mmap would not end up using odd (possibly disconnected) paths for 
accessing it.

I'd be happy to pick up this work if there is consensus on the general 
direction. I would need some help with reviews and guidance along the way.

Best regards
ZK

[1] https://gitlab.com/apparmor/apparmor/-/issues/571



More information about the AppArmor mailing list