Re: [PATCH 1/3] mseal sysmap: Add mseal_system_mappings= boot parameter

From: Jeff Xu

Date: Wed Oct 28 2026 - 02:17:12 EST


Hi Chris,

On Wed, Oct 28, 2026 at 01:55:40PM +0800, Chris Down wrote:
Chris Down writes:
> - Have check_sealed skip as usual when [vdso] isn't sealed and param
> is not set
> - A new test, say expect_sealed, fails in the same case
> - run_vmtests runs with -T expect_sealed when
> CONFIG_MSEAL_SYSTEM_MAPPINGS=y

Er, the other way around. I meant vm_runtests passes -T expect_sealed
_unless_ CONFIG_MSEAL_SYSTEM_MAPPINGS=y.

Using kselftest_harness's `-T expect_sealed` together with checking
`/proc/cmdline` for `no_mseal_sys_mappings` in `check_sealed` sounds
great to me -- very clean and covers both regression cases without extra
argument parsing.

Thanks!
Jeff