Re: [PATCH 2/2] security.capability: fix conversions on getxattr

[Miklos Szeredi]

On Thu, Jan 28, 2021 at 9:24 PM Eric W. Biederman <ebiederm@xxxxxxxxxxxx> wrote:

> <aside>
> From our previous discussions I would also argue it would be good
> if there was a bypass that skipped all conversions if the reader
> and the filesystem are in the same user namespace.
> </aside>

That's however just an optimization (AFAICS) that only makes sense if
it helps a read world workload.   I'm not convinced that that's the
case.

Thanks,
Miklos