lkml.org 
[lkml]   [2002]   [Apr]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    SubjectRe: Two fixes for 2.4.19-pre5-ac3
    From
    On Sun, Apr 07, 2002 at 08:18:16PM +0100, Alan Cox wrote:
    > > I'm a bit disappointed this has just gone in without any real discussion
    > > on the usefulness of this for certain circumstances :(
    >
    > How about "there are no correct users". Its basically impossible to patch
    > the syscall table safely anyway. As Arjan pointed out there are races
    > against module unload that on SMP are basically incurable. Doing the
    > right hooks makes the AFS code portable which is a big win.

    What they do in the syscall is still questionable in my opinion. AFS
    wants to have a process authentication group (PAG) associated with
    processes. The syscall rewrites some fields in the task structure,
    basically adds 'hidden' entries to the groups array. They should
    probably use something like the task-ornaments patch (was that by Dave
    Howells?), which is what I plan to use for Coda whenever they get merged
    into the mainline.

    Both Coda and AFS have semantically quite similar requirements for the
    PAG indentifier, a generic solution is probably better than having
    random modules hacking their stuff into the syscall table and task
    structures, which is why I do not consider their solution the right one.

    Either add getpag/newpag natively (good for yearly flamefests in
    linux-kernel), or the more generic task-ornaments so I can make a
    trivial module that adds /dev/pag, semantics could be as simple as
    reading returns the current pag, and writing adds a new pag as a
    task-ornament.

    Then both Coda and AFS can use the common mechanism and we'll get things
    like PAM support and PAG aware daemons more quickly and consistently.
    Anything that currently relies on setuid/setgid would f.i. benefit from
    this on Coda and AFS type filesystems, as we can tell the difference
    between administrator, random hacker, mail delivery process, nameserver,
    cron daemon even when they all have the uid 'root'.

    Jan

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:25    [W:3.352 / U:0.192 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site