Messages in this thread | | | Date | Wed, 4 Jul 2007 16:00:54 -0700 (PDT) | From | Casey Schaufler <> | Subject | Re: implement-file-posix-capabilities.patch |
| |
--- Andrew Morgan <morgan@kernel.org> wrote:
> no one has yet actually > given an example of where fE being richer than a simple binary helps > anything. Until I see an example, I'm going to hold the position that > this is needless "complexity".
The only counter to this argument is that you now have a different structure on files than on processes. Not a major issue, but one structure to describe capability sets is less complex than two. That way you can have one function to print a capset, regardless of its coming off a file or a process.
Just a thought.
Casey Schaufler casey@schaufler-ca.com - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |