Re: [PATCH -mm 5/7] add user namespace

[Serge E. Hallyn]

Quoting Eric W. Biederman (ebiederm@xxxxxxxxxxxx):
> >> keys are essentially security credentials for something besides the
> >> local kernel.  Think kerberos tickets.  That makes the keys the
> >> obvious place to say what uid you are in a different user namespace
> >> and similar things.
> >
> > what about performance ? wouldn't that slow the checking ?
> 
> It needs to be looked at, but it shouldn't slow the same namespace
> case,

How so?  The processesing is the same.

> and permission checking is largely a slow path issue.  So a little
> overhead at open time is preferred to overhead after you get the file
> open.

Unsure which approach has overhead after file open...

-serge
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/