This is an automated email from the ASF dual-hosted git repository.
xiaoxiang781216 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/nuttx.git
The following commit(s) were added to refs/heads/master by this push:
new 26e2cbd2ec1 fs/Kconfig: Say that FS_PERMISSION enforces the permission
checks.
26e2cbd2ec1 is described below
commit 26e2cbd2ec14ca5e99357c9b10054bd7070462b7
Author: Marco Casaroli <[email protected]>
AuthorDate: Tue Oct 20 20:54:46 2026 +0200
fs/Kconfig: Say that FS_PERMISSION enforces the permission checks.
The help text of FS_PERMISSION said that the option alone does not
enforce permission checks at run time. That is no longer true: with the
option, the VFS, tmpfs, littlefs, named semaphores, message queues and
shared memory objects check the mode bits and fail with EACCES.
Describe the checks and point to the documentation page.
Assisted-by: Claude Code:claude-opus-5-5
Signed-off-by: Marco Casaroli <[email protected]>
---
fs/Kconfig | 10 ++++++----
1 file changed, 6 insertions(+), 4 deletions(-)
diff --git a/fs/Kconfig b/fs/Kconfig
index bcc9c29556b..2a37d1f30a2 100644
--- a/fs/Kconfig
+++ b/fs/Kconfig
@@ -135,15 +135,17 @@ config FS_PERMISSION
---help---
Enable filesystem ownership and permission metadata
- support for pseudoFS inodes.
+ support for pseudoFS inodes, and the POSIX permission
+ checks at run time: the VFS, tmpfs, littlefs (with
+ FS_LITTLEFS_ATTR_UPDATE), named semaphores, message
+ queues and shared memory objects fail with EACCES when
+ the mode bits do not allow the access. See
+ Documentation/os/filesystem/file_permission.rst.
Requires SCHED_USER_IDENTITY and
PSEUDOFS_ATTRIBUTES for task credential tracking
and inode ownership/mode metadata support.
- This option alone does not enforce runtime
- permission checks.
-
comment "UNIX filesystem permission support requires
SCHED_USER_IDENTITY=y, PSEUDOFS_ATTRIBUTES=y and DISABLE_PSEUDOFS_OPERATIONS=n"
depends on !SCHED_USER_IDENTITY || !PSEUDOFS_ATTRIBUTES ||
DISABLE_PSEUDOFS_OPERATIONS
