[PATCH] add a vfs_permission helper