On Mon, Aug 26, 2002 at 06:16:59PM +0100, Alan Cox wrote:
It changes the whole semantics of every security test in Linux,
and breaks most of them totally. Our syscalls know the uid is
constant during the call
Could we not (eventually) have CLONE_CREDs and then lock using
task->cred->lock or whatever? Or might there be cases where this will
deadlock? It does mean set[eu]id will have to wait of other threads
and IO to complete... no matter how long that takes, but other than
might it be reasonable?
--cw
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Sat Aug 31 2002 - 22:00:19 EST