ovl: port ovl_maybe_validate_verity() to cred guard

Use the scoped ovl cred guard.

Link: https://patch.msgid.link/20251117-work-ovl-cred-guard-v4-22-b31603935724@kernel.org
Reviewed-by: Amir Goldstein <amir73il@gmail.com>
Signed-off-by: Christian Brauner <brauner@kernel.org>

diff --git a/fs/overlayfs/namei.c b/fs/overlayfs/namei.c
index e93bcc5727bcafdc18a499b47a7609fd41ecaec8..dbacf02423cbf9e949e57414c39c23eb9e915b1f 100644 (file)
--- a/fs/overlayfs/namei.c
+++ b/fs/overlayfs/namei.c
@@ -979,15 +979,10 @@ static int ovl_maybe_validate_verity(struct dentry *dentry)
                return err;
 
        if (!ovl_test_flag(OVL_VERIFIED_DIGEST, inode)) {
-               const struct cred *old_cred;
-
-               old_cred = ovl_override_creds(dentry->d_sb);
-
-               err = ovl_validate_verity(ofs, &metapath, &datapath);
+               with_ovl_creds(dentry->d_sb)
+                       err = ovl_validate_verity(ofs, &metapath, &datapath);
                if (err == 0)
                        ovl_set_flag(OVL_VERIFIED_DIGEST, inode);
-
-               ovl_revert_creds(old_cred);
        }
 
        ovl_inode_unlock(inode);