Messages in this thread | | | Date | Sat, 2 Nov 2002 02:06:07 -0500 | From | "Theodore Ts'o" <> | Subject | Re: Filesystem Capabilities in 2.6? |
| |
On Fri, Nov 01, 2002 at 11:32:43AM -0700, Dax Kelson wrote: > > On Fri, 2002-11-01 at 01:49, Rusty Russell wrote: > > I'm down to 8 undecided features: 6 removed and one I missed earlier. > > How about Olaf Dietsche's filesystem capabilities support? It has been > posted a couple times to LK, yesterday even.
Ugh. Personally, as I've said, I'm not convinced filesystem capabilities is worth it, providing the illusion of security --- and probably will make most systems more insecure because most system administrators won't be able to deal with fs capabilties competently.
HOWEVER, if we're going to do it, Olaf's patches is really not the way to do it. If we're going to do it at all, the right way to do it is via extended attributes. Using a sparse file to store capabilities indexed by inode numbers is a bad idea; it will break if the user uses resize2fs on an ext2/3 filesystem, for example.
- Ted - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |