On Wed, 15 May 2024 18:47:55 +0100,
Ingo Schwarze <schwarze@usta.de> wrote:
> 
> So i see now how the patch might have accidentally survived some
> testing, but we clearly must not rely on all the above.
> It's horrible obfuscation at best, and i'm far from convinced
> it is correct in all cases.
> 

Thanks for your reply and analyze of patch.

The better approach to solve the same issue were suggested [1] and merged
already.

So, no need to mvoe forward with this one.

Short version of context: I use sshfs via fuse and /usr/libexec/security
doesn't skip it. Instead it walk into it. Mounted FS contains millions of
files which leads to extreamly long walk which at the end crashes sshfs.

So, this patch was an attempt to avoid that, but it was wrong move.

Footnotes:
[1]  https://marc.info/?t=171465050600003&r=1&w=2

-- 
wbr, Kirill