Messages in this thread | | | Date | Thu, 27 Mar 2014 16:41:27 +0100 | From | Florian Weimer <> | Subject | Re: Thoughts on credential switching |
| |
On 03/27/2014 02:01 AM, Andy Lutomirski wrote:
> Essentially, it's a performance problem. knfsd has override_creds, > and it can cache struct cred. But userspace doing the same thing > (i.e. impersonating a user) has to do setresuid, setresgid, and > setgroups, which kills performance, since it results in something like > five RCU callbacks per impersonation round-trip.
Do you mean setfsuid instead of setresuid?
-- Florian Weimer / Red Hat Product Security Team
| |