On Mon, Aug 05, 2024 at 05:35:35PM +0200, Christian Brauner wrote: > But having it in there isn't wrong. In procfs permission/eligibility > checks often are checked as close to the open as possible. Worst case > it's something similar here. But it's certainly wrong to splat about it. Right, please keep the redundant check, but we can downgrade it from a WARN. It's caught stuff in the past, so I'd like to retain it until we really do feel safe enough to let it go. -- Kees Cook