Re: [PATCH 0/3] Enable namespaced file capabilities

From: Serge E. Hallyn
Date: Fri Jun 23 2017 - 14:40:04 EST


Quoting Eric W. Biederman (ebiederm@xxxxxxxxxxxx):
> Even with one xattr of any type there is something appealing about
> putting the logic that limits that xattr to a namespace in the name. As

Exactly. That's the idea - from Stefan - that I thought was a worthwhile
improvement over my own previous patch, which puts the logic in the value.
Most of the complaints raised so far about this patchset are just as valid (or
invalid) against my previous patch, but I was particularly interested in
thoughts on this approach versus mine.

thanks,
-serge