Chris Lu 5112da98a2 mount: skip redundant permission checks under default_permissions (#10089) ...

With default_permissions (the mount default) the kernel enforces unix
permission bits from the getattr/lookup attributes before it ever calls
Open, Create, or Mknod. The mount was re-checking permissions in
AcquireHandle and createRegularFile anyway, which duplicated the kernel's
work and kept the supplementary-group lookup on the per-file hot path.

Gate only the mode-bit access check on default_permissions being off, so
a non-root copy does no permission work on open/create. createRegularFile
still loads the parent to validate it exists, since the create RPC skips
the filer-side parent check. With default_permissions off the mount
remains the sole enforcer, so the full check still runs.

2026-06-24 14:24:51 -07:00

..

scaffold

security.toml: document WEED_ env override for jwt signing keys (#9981)

2026-06-15 13:25:06 -07:00

admin.go

admin: don't log normal 2xx/3xx HTTP requests (incl. 304 cache hits)

2026-06-17 11:34:38 -07:00

autocomplete.go

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

backends.go

storage: register tier backends at the binary composition root (#9989)

2026-06-16 11:47:32 -07:00

backup.go

fix(balance): don't move remote-tiered volumes; don't fatal on missing .idx (#9335)

2026-05-06 15:19:43 -07:00

benchmark.go

fix(benchmark): close CPU profile file handle after profiling (#10048)

2026-06-22 20:33:22 -07:00

command.go

refactor(filer): remove the inode->path index and the NFS gateway (#9724)

2026-05-28 15:00:18 -07:00

compact.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

download.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

export.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

filer_backup_test.go

feat(filer.backup): -initialSnapshot seeds destination from live tree (#9126)

2026-04-17 21:21:32 -07:00

filer_backup.go

feat(filer.backup): -initialSnapshot re-seeds a reinitialized destination (#9828)

2026-06-07 23:35:53 -07:00

filer_cat.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

filer_copy.go

grpc: don't tear down the shared master connection on a caller's own timeout (#9775)

2026-06-01 15:11:02 -07:00

filer_meta_backup.go

fix: handle meta backup offset errors safely (#9818)

2026-06-04 10:53:23 -07:00

filer_meta_tail_elastic.go

fix(filer.meta.tail): include extended metadata in Elasticsearch docs (#9200)

2026-04-23 11:54:08 -07:00

filer_meta_tail_non_elastic.go

fix(filer.meta.tail): fail fast when -es is used without elastic build tag (#9191)

2026-04-22 09:44:43 -07:00

filer_meta_tail.go

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

filer_remote_gateway_buckets.go

Adjust rename events metadata format (#8854)

2026-03-30 18:25:11 -07:00

filer_remote_gateway.go

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

filer_remote_sync_dir_test.go

fix(remote_gateway): prevent double-versioning when syncing to versioned central bucket (#8710)

2026-03-19 21:18:52 -07:00

filer_remote_sync_dir.go

Adjust rename events metadata format (#8854)

2026-03-30 18:25:11 -07:00

filer_remote_sync.go

chore: execute goimports to format the code (#7983)

2026-01-07 13:06:08 -08:00

filer_replication.go

Added loadSecurityConfigOnce (#5792)

2024-07-16 09:15:55 -07:00

filer_sync_jobs_test.go

fix(filer.sync): keep sync_offset fresh through filtered-event markers (#9733)

2026-05-28 23:29:59 -07:00

filer_sync_jobs.go

perf(filer.sync): don't serialize descendants behind dir attribute updates (#9079)

2026-04-14 18:34:05 -07:00

filer_sync_process_test.go

fix(filer.sync): replicate a rename as an atomic move, not a no-op update (#9895)

2026-06-09 12:54:28 -07:00

filer_sync_subscription_test.go

filer.sync: pipelined subscription with adaptive batching for faster catch-up (#8791)

2026-03-26 23:55:42 -07:00

filer_sync_verify_test.go

fix(tests): make 32-bit GOARCH tests build and run (#9507)

2026-05-14 20:55:37 -07:00

filer_sync_verify.go

grpc: don't tear down the shared master connection on a caller's own timeout (#9775)

2026-06-01 15:11:02 -07:00

filer_sync.go

fix(filer.sync): replicate a rename as an atomic move, not a no-op update (#9895)

2026-06-09 12:54:28 -07:00

filer.go

ip.bind: bind outbound connections to the configured address (#9834)

2026-06-05 12:44:21 -07:00

fix_ecx_test.go

EC bitrot detection: per-shard checksum sidecars (#9761)

2026-05-31 18:52:44 -07:00

fix_test.go

fix(volume): stop flipping volumes read-only on a non-append-ordered .idx (#9726)

2026-05-28 18:04:31 -07:00

fix.go

EC bitrot detection: per-shard checksum sidecars (#9761)

2026-05-31 18:52:44 -07:00

fuse_notsupported.go

go fix

2026-02-20 18:42:00 -08:00

fuse_std_test.go

fix(command): preserve fuse option after writers (#9972)

2026-06-15 13:11:35 -07:00

fuse_std.go

fix(command): preserve fuse option after writers (#9972)

2026-06-15 13:11:35 -07:00

fuse.go

Fix the issue where fuse command on a node cannot specify multiple configuration directory paths (#7874)

2025-12-25 11:36:38 -08:00

iam.go

Embed IAM API into S3 server (#7740)

2025-12-14 16:02:06 -08:00

imports.go

migrate IAM policies to multi-file storage (#8114)

2026-01-26 11:28:23 -08:00

maintenance_capabilities.go

Refactor plugin system and migrate worker runtime (#8369)

2026-02-18 13:42:41 -08:00

master_follower.go

fix: use consistent telemetryUrl default in master.follower (#7809)

2025-12-17 12:27:43 -08:00

master_test.go

fix: improve raft leader election reliability and failover speed (#8692)

2026-03-18 23:28:07 -07:00

master.go

ip.bind: bind outbound connections to the configured address (#9834)

2026-06-05 12:44:21 -07:00

metadata_event_scope_test.go

Adjust rename events metadata format (#8854)

2026-03-30 18:25:11 -07:00

metadata_event_scope.go

Adjust rename events metadata format (#8854)

2026-03-30 18:25:11 -07:00

mini_admin_auth_test.go

mini: resolve admin credentials from security.toml and env vars (#10021)

2026-06-19 13:04:04 -07:00

mini_bucket_test.go

feat(mini): add -bucket flag to pre-create an S3 bucket on startup (#9302)

2026-05-02 21:02:21 -07:00

mini_plugin_test.go

refactor(s3api): strip back-stamp from PutBucketLifecycleConfiguration (Phase 4) (#9367)

2026-05-08 11:03:03 -07:00

mini.go

fix(filer): apply -filer.disk default to metadata log assigns (#10080)

2026-06-24 10:47:11 -07:00

mount_darwin.go

Make weed-fuse compatible with systemd-based mount (#6814)

2026-03-18 12:18:40 -07:00

mount_freebsd.go

Make weed-fuse compatible with systemd-based mount (#6814)

2026-03-18 12:18:40 -07:00

mount_linux.go

Make weed-fuse compatible with systemd-based mount (#6814)

2026-03-18 12:18:40 -07:00

mount_notsupported.go

go fix

2026-02-20 18:42:00 -08:00

mount_std_test.go

go fix

2026-02-20 18:42:00 -08:00

mount_std.go

mount: skip redundant permission checks under default_permissions (#10089)

2026-06-24 14:24:51 -07:00

mount.go

mount: route POSIX advisory locks to the owner filer under -dlm (#9669)

2026-05-24 23:56:37 -07:00

mq_agent.go

fix(weed/command) address unhandled errors (#9208)

2026-04-23 22:15:05 -07:00

mq_broker.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

mq_kafka_gateway.go

Add Kafka Gateway (#7231)

2025-10-13 18:05:17 -07:00

plugin_worker_test.go

refactor(worker): co-locate plugin handlers with their task packages (#9301)

2026-05-02 18:03:13 -07:00

s3_iceberg_endpoint_test.go

fix(iceberg): route catalog clients to the right bucket and vend S3 endpoint (#9109)

2026-04-16 15:51:43 -07:00

s3.go

s3: actually bind outbound connections when -ip.bind is set (#9849)

2026-06-07 10:20:58 -07:00

scaffold_test.go

…

scaffold.go

admin: configure maintenance tasks via admin.toml (#9926)

2026-06-11 11:04:52 -07:00

server.go

ip.bind: bind outbound connections to the configured address (#9834)

2026-06-05 12:44:21 -07:00

sftp.go

ip.bind: bind outbound connections to the configured address (#9834)

2026-06-05 12:44:21 -07:00

shell.go

go fmt

2026-04-10 17:31:14 -07:00

update_full.go

go fix

2026-02-20 18:42:00 -08:00

update.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00

upload.go

grpc: don't tear down the shared master connection on a caller's own timeout (#9775)

2026-06-01 15:11:02 -07:00

version.go

Refine enterprise edition feature blurb in version output and docs

2026-05-30 09:29:06 -07:00

volume_test.go

…

volume.go

volume: remove ec.bitrotChecksum and ec.bitrotBlockSizeMB flags (#10000)

2026-06-17 00:07:38 -07:00

webdav.go

ip.bind: bind outbound connections to the configured address (#9834)

2026-06-05 12:44:21 -07:00

worker_runtime.go

plugin worker: support job type categories (all, default, heavy) (#8547)

2026-03-07 18:30:58 -08:00

worker_test.go

fix(s3tests): wire lifecycle worker for expiration suite (#9374)

2026-05-08 17:29:47 -07:00

worker.go

refactor(command): expand "~" in all path-style CLI flags (#9306)

2026-05-03 21:46:21 -07:00