Re: [RFC PATCH 00/27] Containers and using authenticated filesystems

From: James Morris
Date: Fri Feb 15 2019 - 17:36:23 EST


On Fri, 15 Feb 2019, David Howells wrote:

>
> Here's a collection of patches that containerises the kernel keys and makes
> it possible to separate keys by namespace. This can be extended to any
> filesystem that uses request_key() to obtain the pertinent authentication
> token on entry to VFS or socket methods.

Shouldn't Eric Biederman be cc'd on this?

--
James Morris
<jmorris@xxxxxxxxx>