# Virtual File System ## Identification `MacBookAir7,2` identifies a 2015-era 13-inch MacBook Air family. `zswap` compresses pages before swap backing storage; `lzo` and `zbud` name its compressor and allocator. [[Extended Verification Module|EVM]], SELinux, Smack, and AppArmor are Linux security mechanisms. [[Virtual File System|VFS]] abstracts filesystem operations. Hybrid MBR/GPT layouts were used for compatibility but can create ambiguous partition state. ## Notebook evidence - [[Scanned_20260730-1719#PDF page 67 — MacBookAir7,2 boot security and kernel memory features|PDF page 67: MacBookAir7,2 boot security and kernel memory features]] — The page is a Linux-on-Mac boot inventory: exact model/firmware, certificate trust, memory pressure behavior, mandatory-access-control frameworks, filesystem layer, relocation, and legacy disk compatibility. ## Relationships and overlays The source places this note in a shared evidence cluster with [[Extended Verification Module|Extended Verification Module]]. Within the larger collection, this evidence extends [[Vendor-Agnostic Recovery|vendor-agnostic recovery]] and [[Continuity Architecture|continuity architecture]] by showing how software, hardware, identity, and pre-OS control depend on recoverable interfaces. ## Evidentiary status and open leads Capture EFI mode, Secure Boot availability, partition table from two tools, active LSM order, kernel command line, and boot-loader configuration. ## Source - [[Scanned_20260730-1719|Scanned_20260730-1719]]