[rsbac-commit] linux-5.15.y 5.15.165 commit 74f7b2528a65 With "Hide filesystem objects", hide in all places where CAP FD hid

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-5.15.y.git;a=summary

RSBAC for Linux 5.15 (Long Term)

Current version: 5.15.165

commit 74f7b2528a65ecf8fe5eb32369f12c29a0df17a0 Author: Amon Ott ao@rsbac.org Date: Tue Sep 3 13:11:26 2024 +0200

With "Hide filesystem objects", hide in all places where CAP FD hiding does. CONFIG_RSBAC_FSOBJ_HIDE hides based on SEARCH right, this means extra SEARCH requests for all covered items.

fs/ceph/dir.c | 38 +++++++++++++++++- fs/locks.c | 22 +++++++++++ fs/open.c | 124 ++++++++++++++++++++++++++++++++++++++++++++++------------ 3 files changed, 157 insertions(+), 27 deletions(-)