[rsbac-commit] linux-6.12.y 6.12.38 commit c0b5c7bfc4a8 rsbac_cap_hide_fd(): always call generic_permission() to avoid Ceph

https://git.rsbac.org/cgi-bin/gitweb.cgi?p=linux-6.12.y.git;a=summary

RSBAC for Linux 6.12 (Long Term)

Current version: 6.12.38

commit c0b5c7bfc4a8f9ee9da38371a1f3179ee3aade12 Author: Amon Ott ao@rsbac.org Date: Fri Jul 18 07:50:33 2025 +0200

rsbac_cap_hide_fd(): always call generic_permission() to avoid Ceph overload Ceph does not seem to handle too many calls to its i_op->permission() well, this leads to many objects being hidden despite correct access rights. The extra checks in ceph_permission() are not really relevant for hiding anyway.

rsbac/help/helpers.c | 25 ++++++++----------------- 1 file changed, 8 insertions(+), 17 deletions(-)