rsbac-commit August 2025

rsbac-commit@rsbac.org

1 participants
3 discussions

linux-6.12.y 6.12.41 commit 0f0b275ecfb6 Enable rsbac_fd_cache_ceph by default, it has been well tested by n
by Amon Ott 06 Aug '25

06 Aug '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.12.y.git;a=summary RSBAC for Linux 6.12 (Long Term) Current version: 6.12.41 commit 0f0b275ecfb6743dd52c47bd1c8ffefd2e438546 Author: Amon Ott <ao(a)rsbac.org> Date: Wed Aug 6 07:43:28 2025 +0200 Enable rsbac_fd_cache_ceph by default, it has been well tested by now. To disable, use kern param rsbac_no_fd_cache_ceph. rsbac/help/debug.c | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-)

1 0

linux-6.6.y 6.6.101 commit 0e459d23ff08 rsbac_cap_hide_fd(): always call generic_permission() to avoid Ceph
by Amon Ott 01 Aug '25

01 Aug '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.6.y.git;a=summary RSBAC for Linux 6.6 (Long Term) Current version: 6.6.101 commit 0e459d23ff08a27ffdf5482683e9939d72040d3e Author: Amon Ott <ao(a)rsbac.org> Date: Fri Jul 18 08:17:06 2025 +0200 rsbac_cap_hide_fd(): always call generic_permission() to avoid Ceph overload Ceph does not seem to handle too many calls to its i_op->permission() well, this leads to many objects being hidden despite correct access rights. The extra checks in ceph_permission() are not really relevant for hiding anyway. rsbac/help/helpers.c | 25 ++++++++----------------- 1 file changed, 8 insertions(+), 17 deletions(-)

1 0

linux-6.12.y 6.12.41 commit b4c5bc268db9 rsbac_cap_hide_fd(): always call generic_permission() to avoid Ceph
by Amon Ott 01 Aug '25

01 Aug '25

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.12.y.git;a=summary RSBAC for Linux 6.12 (Long Term) Current version: 6.12.41 commit b4c5bc268db98499b1dd72553f550fd0fe377859 Author: Amon Ott <ao(a)rsbac.org> Date: Fri Jul 18 07:50:33 2025 +0200 rsbac_cap_hide_fd(): always call generic_permission() to avoid Ceph overload Ceph does not seem to handle too many calls to its i_op->permission() well, this leads to many objects being hidden despite correct access rights. The extra checks in ceph_permission() are not really relevant for hiding anyway. rsbac/help/helpers.c | 25 ++++++++----------------- 1 file changed, 8 insertions(+), 17 deletions(-)

1 0

2025

2024

2023

2022

rsbac-commit August 2025