It changes the whole semantics of every security test in Linux,
and breaks most of them totally. Our syscalls know the uid is
constant during the call
Could we not (eventually) have CLONE_CREDs and then lock using
task->cred->lock or whatever? Or might there be cases where this will
deadlock? It does mean set[eu]id will have to wait of other threads
and IO to complete... no matter how long that takes, but other than
might it be reasonable?
--cw
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/