Re: [PATCH] SUNRPC: connect to UNIX sockets synchronously

2012-12-04 Thread Stanislav Kinsbursky
04.12.2012 18:20, Eric Paris пишет: On Tue, Dec 4, 2012 at 6:10 AM, Stanislav Kinsbursky wrote: But there should be noted, that such implementation introduces limitation (Trond's quote): "That approach can fall afoul of the selinux restrictions on the process context. Processes that are

Re: [PATCH] SUNRPC: connect to UNIX sockets synchronously

2012-12-04 Thread Eric Paris
On Tue, Dec 4, 2012 at 6:10 AM, Stanislav Kinsbursky wrote: > But there should be noted, that such implementation introduces limitation > (Trond's quote): > "That approach can fall afoul of the selinux restrictions on the process > context. Processes that are allowed to write data, may not be

[PATCH] SUNRPC: connect to UNIX sockets synchronously

2012-12-04 Thread Stanislav Kinsbursky
Local tranports uses UNIX sockets and connecting of these sockets is done in context of file system namespace (i.e. task file system root). Currenly, all sockets connect operations are performed by rpciod work queue, which actually means, that any service will be registered in the same rpcbind

[PATCH] SUNRPC: connect to UNIX sockets synchronously

2012-12-04 Thread Stanislav Kinsbursky
Local tranports uses UNIX sockets and connecting of these sockets is done in context of file system namespace (i.e. task file system root). Currenly, all sockets connect operations are performed by rpciod work queue, which actually means, that any service will be registered in the same rpcbind

Re: [PATCH] SUNRPC: connect to UNIX sockets synchronously

2012-12-04 Thread Eric Paris
On Tue, Dec 4, 2012 at 6:10 AM, Stanislav Kinsbursky skinsbur...@parallels.com wrote: But there should be noted, that such implementation introduces limitation (Trond's quote): That approach can fall afoul of the selinux restrictions on the process context. Processes that are allowed to write

Re: [PATCH] SUNRPC: connect to UNIX sockets synchronously

2012-12-04 Thread Stanislav Kinsbursky
04.12.2012 18:20, Eric Paris пишет: On Tue, Dec 4, 2012 at 6:10 AM, Stanislav Kinsbursky skinsbur...@parallels.com wrote: But there should be noted, that such implementation introduces limitation (Trond's quote): That approach can fall afoul of the selinux restrictions on the process context.