On Wed, Aug 06, 2025 at 02:48:30PM +1000, Aleksa Sarai wrote: > error = security_sb_kern_mount(sb); > - if (!error && mount_too_revealing(sb, &mnt_flags)) > + if (!error && mount_too_revealing(sb, &mnt_flags)) { > error = -EPERM; > + errorfcp(fc, "VFS", "Mount too revealing"); > + } Hmm... For aesthetics sake, I'd probably do logging first; otherwise fine by me.