Messages in this thread | | | From | David Howells <> | Subject | Re: [PATCH 24/32] vfs: syscall: Add fsopen() to prepare for superblock creation [ver #9] | Date | Wed, 11 Jul 2018 09:43:21 +0100 |
| |
Andy Lutomirski <luto@kernel.org> wrote:
> > Umm... How about "use credentials of opener for everything"? > > If you want to audit every single filesystem for any code that uses > credentials for anything and add all the right kernel APIs and make > sure the filesystem uses them and somehow keep screwups from getting > added down the line, then okay I guess. As far as I know, we don't > even *have* an API for "open this device node using this struct cred > *".
You can use override_creds() too.
David
| |