Hi Christian, Mickaël, and folks, Could you please share your comments on this version? Does this look sane? Thanks, Song On Mon, Jun 16, 2025 at 11:11 PM Song Liu <song@xxxxxxxxxx> wrote: > > In security use cases, it is common to apply rules to VFS subtrees. > However, filtering files in a subtree is not straightforward [1]. > > One solution to this problem is to start from a path and walk up the VFS > tree (towards the root). Among in-tree LSMs, Landlock uses this solution. > [...]