VFS rewrite - #1043

Open

tridge wants to merge 69 commits into

Commits on Aug 13, 2026

vfs: scaffold the virtual-filesystem layer
tridge
committed
1e4a52e
vfs: move the dirstack path-walk primitives into vfs/dirstack.c
tridge
committed
366bbf6
vfs: move the secure path resolver into vfs/secure_open.c
tridge
committed
e1b4784
vfs: move the operator-path ownership walk into vfs/owner_walk.c
tridge
committed
b5d30f9
vfs: move the held-dirfd cache into vfs/dircache.c
tridge
committed
a5f52ee
vfs: tidy comments and drop unused externs after the core move
tridge
committed
db6c5ac
vfs: fold the dirfd cache statics into struct vfs
tridge
committed
a76ef87
vfs: fold curr_dir/curr_dir_len into struct vfs
tridge
committed
540245f
vfs: fold operator_path_resolve into struct vfs
tridge
committed
48250ed
vfs: move the stat family into vfs/stat.c
tridge
committed
ad5c09a
vfs: move the rename family into vfs/rename.c
tridge
committed
02ea67a
vfs: move the unlink/rmdir family into vfs/unlink.c
tridge
committed
7f03474
vfs: move the open family into vfs/open.c
tridge
committed
e84b935
vfs: move the chmod family into vfs/chmod.c
tridge
committed
07dd81b
vfs: move the symlink/readlink family into vfs/symlink.c
tridge
committed
e76b927
vfs: move the link family into vfs/link.c
tridge
committed
c6e8648
vfs: move the mkdir/mkstemp family into vfs/mkdir.c
tridge
committed
26236b1
vfs: move the lchown family into vfs/chown.c
tridge
committed
546e04b
vfs: move the mknod family into vfs/mknod.c
tridge
committed
951489d
vfs: move the times family into vfs/times.c
tridge
committed
7f2ebc5
vfs: move the file-data ops into vfs/fileio.c
tridge
committed
2341b7b
vfs: restore platform includes in vfs/chmod.c
tridge
committed
7c15f78
vfs: remove the now-empty syscall.c
tridge
committed
94fa51b
vfs: document the layer contract in vfs/vfs.h
tridge
committed
b441787
vfs: snapshot the daemon module root into struct vfs
tridge
committed
068c086
vfs: thread the operator context into abspath_excluded_by_module
tridge
committed
230d25b
vfs: unify the mkdir family into vfs_mkdir(dirfd, path, mode, flags)
tridge
committed
e34177b
vfs: unify the mknod family into vfs_mknod(dirfd, path, mode, dev, flags)
tridge
committed
31c3b8f
vfs: unify the symlink family into vfs_symlink(lnk, dirfd, path, flags)
tridge
committed
6e30517
vfs: move make_path into the VFS compound layer as vfs_make_path
tridge
committed
056a9fe
vfs: move copy_file + robust_unlink/rename into the VFS compound layer
tridge
committed
1695148
gitignore: ignore the vfs test binaries
tridge
committed
cbe4ae7
vfs: flag vfs_open_at + thread vfs_flags through copy_file's dest open
tridge
committed
ae81947
vfs: unify the unlink/rmdir family + flag robust_unlink
tridge
committed
e12eb04
vfs: flag vfs_rename_at + retire three operator-path blocks
tridge
committed
d037014
vfs: fix stale comment in unlink_and_reopen (robust_unlink now flagged)
tridge
committed
c89283a
vfs: flag vfs_open_owner_walk + secure_basis_open; retire two more blocks
tridge
committed
5c97ad3
vfs: flag vfs_link_at + thread hard_link_one; retire the hard-link block
tridge
committed
4a0f20f
vfs: thread the operator flag through stat/lstat + x_stat/x_lstat
tridge
committed
871d197
vfs: delete the operator_path_resolve global
tridge
committed
b226005
vfs: fix the !SUPPORT_XATTRS x_stat/x_lstat macros for the vfs_flags arg
tridge
committed
f436561
vfs: unify stat/lstat, chmod, lchown into dirfd+flags form
tridge
committed
1214c4a
vfs: docs pass for the unified dirfd+flags API
tridge
committed
b61342e
vfs: update the !SUPPORT_XATTRS x_stat/x_lstat macros for the unified stat
tridge
committed
af68dac
vfs: codex review fixes for the unified stat/chmod/lchown
tridge
committed
18e30dd
vfs: adapt the merged-in base changes to the VFS layer
tridge
committed
e0f2f52
vfs: port 37dbb263's operator-path mknod FIFO/socket fallback
tridge
committed
fbfa40f
vfs: round-3 operator-path reconciliation (snap to merge oracle)
tridge
committed
4099664
delete: confine the backup-tree unlink via the operator ownership walk
tridge
committed
139c305
vfs: split two-path ops to per-operand policy flags (rename/link)
tridge
committed
6212236
testsuite: per-operand policy regression for vfs_rename_at (PR #30)
tridge
committed
955115c
rsync: never path-resolve a confined receiver's xattr/ACL write (copy-xattrs race)
tridge
committed
eab19ec
vfs: review fixes
tridge
committed
5210c5f
vfs: add STRICT_CONFINEMENT build-time confinement assertion
tridge
committed
531f941
rsync,generator: assert the xattr/ACL pin invariant under STRICT_CONFINEMENT
tridge
committed
fc23ad7
github: run the ASan suite under --enable-strict-confinement
tridge
committed
1a8c81d
acls: use vfs_relpath_active in the Solaris ACL branch
tridge
committed
331188a
vfs: adapt the merged-in base changes to the VFS layer
tridge
committed
4c142f6
vfs: fix the no-AT_FDCWD fallback in vfs__symlink_secure
tridge
committed
ea03fe0
testsuite: keep daemon test ports out of the 13000+ bloatware range
tridge
committed
01e0de3
gitignore: ignore the remaining test-helper binaries
tridge
committed
518c09f
vfs: adapt the merged-in base changes to the VFS layer
tridge
committed
39c6c31
vfs: fail loud in the held-fd lstat no-AT_SYMLINK_NOFOLLOW arm; make the compile-check atomic
tridge
committed
359baac
vfs: adapt the merged-in base changes to the VFS layer
tridge
committed
97d7cfc
vfs: adapt the merged-in base changes to the VFS layer
tridge
committed
fca1d10
vfs: give set_file_attrs' path-based chmod/chown the operator policy
tridge
committed
730e619
testsuite: cover the backup-dir ownership set under a parent swap
tridge
committed
893e88a
vfs: adapt the merged-in base changes to the VFS layer
tridge
committed
1030929
fleettest: mac2-hfs runs the backup-dir ownership race too
tridge
committed
2358081