Messages in this thread | | | Date | Mon, 24 Oct 2011 12:28:42 -0500 | From | "Serge E. Hallyn" <> | Subject | Re: [PATCH 05/10] user namespace: clamp down users of cap_raised |
| |
Quoting Andrew G. Morgan (morgan@kernel.org): > Serge, > > It seems as if this whole thing is really idiomatic. How about? > > #define IN_ROOT_USER_NS_CAPABLE(cap) \ > ((current_user_ns() == &init_user_ns) && cap_raised(current_cap(), cap))
My objection to this was that it seems to encourage others to use it :) I'm not sure we want that. Also, IN_ROOT_USER_NS seems more generally useful.
But if I'm the only one who feels this way I'll go ahead and do it...
thanks, -serge
| |