Re: syscall: introduce sendfd() syscall (v.2)

[One Thousand Gnomes]

> 2.a. If task A has sufficient capabilities to send signals to task B, then
> task A is already in position to do anything it wants with task B, including
> killing it outright.

Not entirely true.

- We have securirty models like SELinux
- We have namespaces and being able to send an fd between namespaces is
  not quite as flexible as you would make it

I suspect therefore it needs security hooks but otherwise looks more sane
than the current AF_UNIX approach.

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/