Abhishekmishra2808 opened a new pull request, #18902:
URL: https://github.com/apache/nuttx/pull/18902

   *Note: Please adhere to [Contributing 
Guidelines](https://github.com/apache/nuttx/blob/master/CONTRIBUTING.md).*
   
   ## Summary
   
   Implemented pseudoFS permission enforcement for VFS mutation operations: 
`unlink()`, `mkdir()`, and `rename()`.
   This change introduces parent-directory permission validation using 
`inode_checkdirperm()` before modifying pseudoFS inode topology. Unauthorized 
operations now correctly return -EACCES based on effective uid/gid and inode 
mode bits.
   The implementation preserves existing mountpoint filesystem behavior and 
correctly handles rename path-rewrite cases such as `mv file dir/`.
   
   ## Impact
   
   This extends pseudoFS permission enforcement by extending checks beyond 
open() into filesystem mutation paths. The update prevents unauthorized file 
removal, directory creation, and file renaming/moves
   
   including bypass scenarios where rename operations could previously modify 
filesystem state without proper parent-directory permission checks.
   
   ## Testing
   
   <img width="520" height="842" alt="image" 
src="https://github.com/user-attachments/assets/c7beb826-6dd8-4ce8-a499-83c634d04b51";
 />
   
   ostest also passed


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to