On Wed, Mar 24, 2021 at 05:09:59AM +0000, Al Viro wrote: > On Mon, Mar 22, 2021 at 03:49:01PM +0100, Miklos Szeredi wrote: > Umm... No equivalents of > /* > * Prevent copy up if immutable and has no CAP_LINUX_IMMUTABLE > * capability. > */ > ret = -EPERM; > if (!ovl_has_upperdata(inode) && IS_IMMUTABLE(inode) && > !capable(CAP_LINUX_IMMUTABLE)) > goto unlock; > Nevermind, you take care of that in the caller...