[PATCH 2/2] security.capability: fix conversions on getxattr
Miklos Szeredi
miklos at szeredi.hu
Thu Jan 28 20:38:00 UTC 2021
On Thu, Jan 28, 2021 at 9:24 PM Eric W. Biederman <ebiederm at xmission.com> wrote:
> <aside>
> From our previous discussions I would also argue it would be good
> if there was a bypass that skipped all conversions if the reader
> and the filesystem are in the same user namespace.
> </aside>
That's however just an optimization (AFAICS) that only makes sense if
it helps a read world workload. I'm not convinced that that's the
case.
Thanks,
Miklos
More information about the Linux-security-module-archive
mailing list