From 97d4776fc4f90cd89eb8bc75bf5575c690614ca9 Mon Sep 17 00:00:00 2001
From: Phil Dennis-Jordan <phil@philjordan.eu>
Date: Sat, 6 Oct 2018 10:25:24 +0200
Subject: [PATCH] Mac kext: Adds check to only handle fileops on allowed
 filesystems

The vnode handler was already performing this check, but the fileop handler previously skipped it. This is part 1 of a fix for KP bug report #340.
---
 ProjFS.Mac/PrjFSKext/PrjFSKext/KauthHandler.cpp | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/ProjFS.Mac/PrjFSKext/PrjFSKext/KauthHandler.cpp b/ProjFS.Mac/PrjFSKext/PrjFSKext/KauthHandler.cpp
index 111c9355d..91e4e0041 100644
--- a/ProjFS.Mac/PrjFSKext/PrjFSKext/KauthHandler.cpp
+++ b/ProjFS.Mac/PrjFSKext/PrjFSKext/KauthHandler.cpp
@@ -670,6 +670,11 @@ static bool ShouldHandleFileOpEvent(
 {
     *root = RootHandle_None;
 
+    if (!VirtualizationRoot_VnodeIsOnAllowedFilesystem(vnode))
+    {
+        return false;
+    }
+
     vtype vnodeType = vnode_vtype(vnode);
     if (ShouldIgnoreVnodeType(vnodeType, vnode))
     {