[lkml]   [2007]   [Sep]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH 01/24] CRED: Introduce a COW credentials record
    On Wed, Sep 26, 2007 at 03:21:05PM +0100, David Howells wrote:
    > To alter the credentials record, a copy must be made. This copy may then be
    > altered and then the pointer in the task_struct redirected to it. From that
    > point on the new record should be considered immutable.

    Umm... Perhaps a better primitive would be "make sure that our cred is
    not shared with anybody, creating a copy and redirecting reference to
    it if needed".

    > In addition, the default setting of i_uid and i_gid to fsuid and fsgid has been
    > moved from the callers of new_inode() into new_inode() itself.

    I don't think it's safe; better do something trivial like
    that would set these (and that's a goot splitup candidate, to go in front
    of the series).

    FWIW, the main weakness here is the need of update_current_cred()
    splattered all over the entry points. Two problems:
    a) it's a bug source (somebody adds a syscall and forgets to
    add that call / somebody modifies syscall guts and doesn't notice that
    it needs to be added).
    b) it's almost always doing noting, so being lazier would be
    better (event numbers checked in the inlined part, perhaps?)

    The former would be more robust if it had been closer to the places where
    we get to passing current->cred to functions. The latter... When do
    we actually step into this kind of situation (somebody changing keys on
    us) and what's the right semantics here? E.g. if it happens in the middle
    of long read(), do we want to keep using the original keys?

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2007-09-26 20:11    [W:0.021 / U:9.836 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site