All Systems Go! 2026

A fundamental aspect of an OS security policy is the ability to manage mounting. That includes filesystem mounts, remounts, bind-mounts, and property changes. Contrary to popular believe Linux exposes only barebones policy hooks. This is about to change.

On a standard Linux OS it is not possible to implement a policy for onlining block devices. Newer kernels will rectify this. Let's figure out how this works.