[Devel] [PATCH vz10 v2 1/2] selftests: ve: grant the directories the files sit in

Vasileios Almpanis vasileios.almpanis at virtuozzo.com
Fri Sep 18 10:11:31 MSK 2026


On Wed, 16 Sep 2026 15:31:19 +0300, Eva Kurchatova <eva.kurchatova at virtuozzo.com> wrote:
> The sysfs variant names nested leaves, kernel/vmcoreinfo and
> kernel/notes, while the proc one names files at the top of the
> filesystem. Both enforcement tests grant the leaves and nothing else,
> so in the sysfs case the lookup stops at /sys/kernel, which a fresh VE
> cannot traverse, and every open answers ENOENT:
> 
>   not ok 14 ve_perms.sysfs.enforce_allows
>   not ok 15 ve_perms.sysfs.enforce_denies
> 
> [...]

Reviewed-by: Vasileios Almpanis <vasileios.almpanis at virtuozzo.com>

-- 
Vasileios Almpanis <vasileios.almpanis at virtuozzo.com>


More information about the Devel mailing list