Messages in this thread |  | | | Date | Sat, 31 May 2008 04:23:56 -0400 | | From | Christoph Hellwig <> | | Subject | Re: [patch 5/8] vfs: annotate permission operations |
On Thu, May 29, 2008 at 01:32:50PM +0200, Miklos Szeredi wrote:
> From: Miklos Szeredi <mszeredi@suse.cz>
>
> Add more PERM_OP_ flags to permission() calls. This allows
> filesystems like NFS and security modules like AppArmor to make
> precise decisions about whent permissions need to be checked, and when
> they will be checked later together with the actual operation.
Where the heck does this PERM_OP crap come from? More MAY_ flags make
sense in some cases, but we should introduce them on a per-need basis
(e.g. to replace lookup intents in many cases), and without a new
PERM_OP_ namespace.
|  |