Re: Re: Thoughts on credential switching

2014-04-22 Thread Jim Lieb
On Tuesday, April 22, 2014 15:14:33 Boaz Harrosh wrote: > On 04/22/2014 02:37 PM, Florian Weimer wrote: > > On 03/27/2014 02:33 PM, Boaz Harrosh wrote: > >> POSIX or not it just does not have any real programming mining > >> at all. > > > > What do you mean with "mining" in this context? > >

Re: Thoughts on credential switching

2014-04-22 Thread Boaz Harrosh
On 04/22/2014 02:37 PM, Florian Weimer wrote: > On 03/27/2014 02:33 PM, Boaz Harrosh wrote: >> POSIX or not it just does not have any real programming mining >> at all. > > What do you mean with "mining" in this context? > Sorry I saw this mistake after I posted. I meant "meaning". What I'm

Re: Thoughts on credential switching

2014-04-22 Thread Florian Weimer
On 03/27/2014 02:33 PM, Boaz Harrosh wrote: man setuid should be saying DEPRECATED, EMULATED and SIGNAL NOT SAFE and be done with it POSIX or no POSIX who cares? The glibc side cares, and there's also this bit: "It aims towards POSIX and Single UNIX Specification compliance.", which should

Re: Thoughts on credential switching

2014-04-22 Thread Florian Weimer
On 03/27/2014 02:33 PM, Boaz Harrosh wrote: man setuid should be saying DEPRECATED, EMULATED and SIGNAL NOT SAFE and be done with it POSIX or no POSIX who cares? The glibc side cares, and there's also this bit: It aims towards POSIX and Single UNIX Specification compliance., which should be

Re: Thoughts on credential switching

2014-04-22 Thread Boaz Harrosh
On 04/22/2014 02:37 PM, Florian Weimer wrote: On 03/27/2014 02:33 PM, Boaz Harrosh wrote: POSIX or not it just does not have any real programming mining at all. What do you mean with mining in this context? Sorry I saw this mistake after I posted. I meant meaning. What I'm saying is that

Re: Re: Thoughts on credential switching

2014-04-22 Thread Jim Lieb
On Tuesday, April 22, 2014 15:14:33 Boaz Harrosh wrote: On 04/22/2014 02:37 PM, Florian Weimer wrote: On 03/27/2014 02:33 PM, Boaz Harrosh wrote: POSIX or not it just does not have any real programming mining at all. What do you mean with mining in this context? Sorry I saw this

Re: Thoughts on credential switching

2014-04-01 Thread One Thousand Gnomes
> Do we include credfd fds sitting in Unix sockets? Ouch > Hmm. What if we had initial_creds and creds, and initial_creds never > changed unless explicitly requested. There wouldn't be any way to > revert to initial_creds, but may_ptrace would check initial_creds > *and* creds. This is a

Re: Thoughts on credential switching

2014-04-01 Thread One Thousand Gnomes
Do we include credfd fds sitting in Unix sockets? Ouch Hmm. What if we had initial_creds and creds, and initial_creds never changed unless explicitly requested. There wouldn't be any way to revert to initial_creds, but may_ptrace would check initial_creds *and* creds. This is a little

Re: Thoughts on credential switching

2014-03-31 Thread Andy Lutomirski
On Mon, Mar 31, 2014 at 1:14 PM, Trond Myklebust wrote: > > On Mar 31, 2014, at 15:26, Andy Lutomirski wrote: > >> On Mon, Mar 31, 2014 at 11:06 AM, Trond Myklebust >> wrote: >>> >>> On Mar 31, 2014, at 7:51, Jeff Layton wrote: >>> On Sun, 30 Mar 2014 09:03:29 -0400 "Theodore Ts'o"

Re: Thoughts on credential switching

2014-03-31 Thread Trond Myklebust
On Mar 31, 2014, at 15:26, Andy Lutomirski wrote: > On Mon, Mar 31, 2014 at 11:06 AM, Trond Myklebust > wrote: >> >> On Mar 31, 2014, at 7:51, Jeff Layton wrote: >> >>> On Sun, 30 Mar 2014 09:03:29 -0400 >>> "Theodore Ts'o" wrote: >>> On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff

Re: Thoughts on credential switching

2014-03-31 Thread Andy Lutomirski
On Mon, Mar 31, 2014 at 11:06 AM, Trond Myklebust wrote: > > On Mar 31, 2014, at 7:51, Jeff Layton wrote: > >> On Sun, 30 Mar 2014 09:03:29 -0400 >> "Theodore Ts'o" wrote: >> >>> On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff Layton wrote: I had some time to think about this last night...

Re: Thoughts on credential switching

2014-03-31 Thread Jeremy Allison
On Mon, Mar 31, 2014 at 11:44:59AM +0100, One Thousand Gnomes wrote: > On Wed, 26 Mar 2014 17:23:24 -0700 > Andy Lutomirski wrote: > > > Hi various people who care about user-space NFS servers and/or > > security-relevant APIs. > > > > I propose the following set of new syscalls: > > > > int

Re: Thoughts on credential switching

2014-03-31 Thread Jeff Layton
On Mon, 31 Mar 2014 14:06:01 -0400 Trond Myklebust wrote: > > On Mar 31, 2014, at 7:51, Jeff Layton wrote: > > > On Sun, 30 Mar 2014 09:03:29 -0400 > > "Theodore Ts'o" wrote: > > > >> On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff Layton wrote: > >>> I had some time to think about this last

Re: Thoughts on credential switching

2014-03-31 Thread Trond Myklebust
On Mar 31, 2014, at 7:51, Jeff Layton wrote: > On Sun, 30 Mar 2014 09:03:29 -0400 > "Theodore Ts'o" wrote: > >> On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff Layton wrote: >>> I had some time to think about this last night... >>> >>> While using a fd to pass around credentials is

Re: Thoughts on credential switching

2014-03-31 Thread Andy Lutomirski
On Mar 31, 2014 3:45 AM, "One Thousand Gnomes" wrote: > > On Wed, 26 Mar 2014 17:23:24 -0700 > Andy Lutomirski wrote: > > > Hi various people who care about user-space NFS servers and/or > > security-relevant APIs. > > > > I propose the following set of new syscalls: > > > > int

Re: Thoughts on credential switching

2014-03-31 Thread Jeff Layton
On Sun, 30 Mar 2014 09:03:29 -0400 "Theodore Ts'o" wrote: > On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff Layton wrote: > > I had some time to think about this last night... > > > > While using a fd to pass around credentials is convenient, the danger > > is that it's pretty opaque. You have a

Re: Thoughts on credential switching

2014-03-31 Thread One Thousand Gnomes
On Wed, 26 Mar 2014 17:23:24 -0700 Andy Lutomirski wrote: > Hi various people who care about user-space NFS servers and/or > security-relevant APIs. > > I propose the following set of new syscalls: > > int credfd_create(unsigned int flags): returns a new credfd that > corresponds to current's

Re: Thoughts on credential switching

2014-03-31 Thread One Thousand Gnomes
On Wed, 26 Mar 2014 17:23:24 -0700 Andy Lutomirski l...@amacapital.net wrote: Hi various people who care about user-space NFS servers and/or security-relevant APIs. I propose the following set of new syscalls: int credfd_create(unsigned int flags): returns a new credfd that corresponds

Re: Thoughts on credential switching

2014-03-31 Thread Jeff Layton
On Sun, 30 Mar 2014 09:03:29 -0400 Theodore Ts'o ty...@mit.edu wrote: On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff Layton wrote: I had some time to think about this last night... While using a fd to pass around credentials is convenient, the danger is that it's pretty opaque. You have

Re: Thoughts on credential switching

2014-03-31 Thread Andy Lutomirski
On Mar 31, 2014 3:45 AM, One Thousand Gnomes gno...@lxorguk.ukuu.org.uk wrote: On Wed, 26 Mar 2014 17:23:24 -0700 Andy Lutomirski l...@amacapital.net wrote: Hi various people who care about user-space NFS servers and/or security-relevant APIs. I propose the following set of new

Re: Thoughts on credential switching

2014-03-31 Thread Trond Myklebust
On Mar 31, 2014, at 7:51, Jeff Layton jlay...@redhat.com wrote: On Sun, 30 Mar 2014 09:03:29 -0400 Theodore Ts'o ty...@mit.edu wrote: On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff Layton wrote: I had some time to think about this last night... While using a fd to pass around

Re: Thoughts on credential switching

2014-03-31 Thread Jeff Layton
On Mon, 31 Mar 2014 14:06:01 -0400 Trond Myklebust trond.mykleb...@primarydata.com wrote: On Mar 31, 2014, at 7:51, Jeff Layton jlay...@redhat.com wrote: On Sun, 30 Mar 2014 09:03:29 -0400 Theodore Ts'o ty...@mit.edu wrote: On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff Layton

Re: Thoughts on credential switching

2014-03-31 Thread Jeremy Allison
On Mon, Mar 31, 2014 at 11:44:59AM +0100, One Thousand Gnomes wrote: On Wed, 26 Mar 2014 17:23:24 -0700 Andy Lutomirski l...@amacapital.net wrote: Hi various people who care about user-space NFS servers and/or security-relevant APIs. I propose the following set of new syscalls:

Re: Thoughts on credential switching

2014-03-31 Thread Andy Lutomirski
On Mon, Mar 31, 2014 at 11:06 AM, Trond Myklebust trond.mykleb...@primarydata.com wrote: On Mar 31, 2014, at 7:51, Jeff Layton jlay...@redhat.com wrote: On Sun, 30 Mar 2014 09:03:29 -0400 Theodore Ts'o ty...@mit.edu wrote: On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff Layton wrote: I had

Re: Thoughts on credential switching

2014-03-31 Thread Trond Myklebust
On Mar 31, 2014, at 15:26, Andy Lutomirski l...@amacapital.net wrote: On Mon, Mar 31, 2014 at 11:06 AM, Trond Myklebust trond.mykleb...@primarydata.com wrote: On Mar 31, 2014, at 7:51, Jeff Layton jlay...@redhat.com wrote: On Sun, 30 Mar 2014 09:03:29 -0400 Theodore Ts'o ty...@mit.edu

Re: Thoughts on credential switching

2014-03-31 Thread Andy Lutomirski
On Mon, Mar 31, 2014 at 1:14 PM, Trond Myklebust trond.mykleb...@primarydata.com wrote: On Mar 31, 2014, at 15:26, Andy Lutomirski l...@amacapital.net wrote: On Mon, Mar 31, 2014 at 11:06 AM, Trond Myklebust trond.mykleb...@primarydata.com wrote: On Mar 31, 2014, at 7:51, Jeff Layton

Re: Thoughts on credential switching

2014-03-30 Thread Andy Lutomirski
On Sun, Mar 30, 2014 at 6:03 AM, Theodore Ts'o wrote: > On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff Layton wrote: >> I had some time to think about this last night... >> >> While using a fd to pass around credentials is convenient, the danger >> is that it's pretty opaque. You have a fd that

Re: Thoughts on credential switching

2014-03-30 Thread Theodore Ts'o
On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff Layton wrote: > I had some time to think about this last night... > > While using a fd to pass around credentials is convenient, the danger > is that it's pretty opaque. You have a fd that you know has creds > attached to it, but it's hard to be

Re: Thoughts on credential switching

2014-03-30 Thread Theodore Ts'o
On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff Layton wrote: I had some time to think about this last night... While using a fd to pass around credentials is convenient, the danger is that it's pretty opaque. You have a fd that you know has creds attached to it, but it's hard to be certain

Re: Thoughts on credential switching

2014-03-30 Thread Andy Lutomirski
On Sun, Mar 30, 2014 at 6:03 AM, Theodore Ts'o ty...@mit.edu wrote: On Thu, Mar 27, 2014 at 07:08:02AM -0700, Jeff Layton wrote: I had some time to think about this last night... While using a fd to pass around credentials is convenient, the danger is that it's pretty opaque. You have a fd

Re: Thoughts on credential switching

2014-03-29 Thread Alex Elsayed
Jeff Layton wrote: > On Wed, 26 Mar 2014 20:25:35 -0700 > Jeff Layton wrote: > >> On Wed, 26 Mar 2014 20:05:16 -0700 >> Andy Lutomirski wrote: >> >> > On Wed, Mar 26, 2014 at 7:48 PM, Jeff Layton >> > wrote: >> > > On Wed, 26 Mar 2014 17:23:24 -0700 >> > > Andy Lutomirski wrote: >> > > >> >

Re: Thoughts on credential switching

2014-03-29 Thread Alex Elsayed
Jeff Layton wrote: On Wed, 26 Mar 2014 20:25:35 -0700 Jeff Layton jlay...@redhat.com wrote: On Wed, 26 Mar 2014 20:05:16 -0700 Andy Lutomirski l...@amacapital.net wrote: On Wed, Mar 26, 2014 at 7:48 PM, Jeff Layton jlay...@redhat.com wrote: On Wed, 26 Mar 2014 17:23:24 -0700

Re: Re: Re: Thoughts on credential switching

2014-03-27 Thread Andy Lutomirski
On Thu, Mar 27, 2014 at 1:47 PM, Jim Lieb wrote: > On Thursday, March 27, 2014 12:45:30 Andy Lutomirski wrote: >> On Thu, Mar 27, 2014 at 12:30 PM, Jim Lieb wrote: >> > Rather than inline, I'm responding in the context of Jeremy's comments but >> > I have to answer others as well. It is Jeremy

Re: Re: Re: Thoughts on credential switching

2014-03-27 Thread Jim Lieb
On Thursday, March 27, 2014 12:45:30 Andy Lutomirski wrote: > On Thu, Mar 27, 2014 at 12:30 PM, Jim Lieb wrote: > > Rather than inline, I'm responding in the context of Jeremy's comments but > > I have to answer others as well. It is Jeremy after all who said my baby > > was ugly ;). > > > >

Re: Re: Thoughts on credential switching

2014-03-27 Thread Andy Lutomirski
On Thu, Mar 27, 2014 at 12:30 PM, Jim Lieb wrote: > Rather than inline, I'm responding in the context of Jeremy's comments but I > have to answer others as well. It is Jeremy after all who said my baby was > ugly ;). > > Jeremy is right about overloading "fd". Maybe I can call it something else

Re: Re: Thoughts on credential switching

2014-03-27 Thread Jim Lieb
Rather than inline, I'm responding in the context of Jeremy's comments but I have to answer others as well. It is Jeremy after all who said my baby was ugly ;). Jeremy is right about overloading "fd". Maybe I can call it something else but an fd (in implementation) has merit because a creds

Re: Thoughts on credential switching

2014-03-27 Thread Andy Lutomirski
On Thu, Mar 27, 2014 at 11:56 AM, Jeremy Allison wrote: > On Thu, Mar 27, 2014 at 11:46:39AM -0700, Andy Lutomirski wrote: >> On Thu, Mar 27, 2014 at 11:26 AM, Jeremy Allison wrote: >> > >> > Amen to that :-). >> > >> > However, after talking with Jeff and Jim at CollabSummit, >> > I was

Re: Thoughts on credential switching

2014-03-27 Thread Jeremy Allison
On Thu, Mar 27, 2014 at 11:46:39AM -0700, Andy Lutomirski wrote: > On Thu, Mar 27, 2014 at 11:26 AM, Jeremy Allison wrote: > > > > Amen to that :-). > > > > However, after talking with Jeff and Jim at CollabSummit, > > I was 'encouraged' to make my opinions known on the list. > > > > To me,

Re: Thoughts on credential switching

2014-03-27 Thread Andy Lutomirski
On Thu, Mar 27, 2014 at 11:26 AM, Jeremy Allison wrote: > > Amen to that :-). > > However, after talking with Jeff and Jim at CollabSummit, > I was 'encouraged' to make my opinions known on the list. > > To me, calling the creds handle a file descriptor just > feels wrong. IT *isn't* an fd, you

Re: Thoughts on credential switching

2014-03-27 Thread Jeremy Allison
On Thu, Mar 27, 2014 at 07:01:26AM -0700, Jeff Layton wrote: > On Thu, 27 Mar 2014 14:06:32 +0100 > Florian Weimer wrote: > > > On 03/27/2014 02:02 PM, Jeff Layton wrote: > > > > >> This interface does not address the long-term lack of POSIX > > >> compliance in setuid and friends, which are

Re: Thoughts on credential switching

2014-03-27 Thread Andy Lutomirski
On Thu, Mar 27, 2014 at 8:41 AM, Florian Weimer wrote: > On 03/27/2014 02:01 AM, Andy Lutomirski wrote: > >> Essentially, it's a performance problem. knfsd has override_creds, >> and it can cache struct cred. But userspace doing the same thing >> (i.e. impersonating a user) has to do setresuid,

Re: Thoughts on credential switching

2014-03-27 Thread Florian Weimer
On 03/27/2014 02:01 AM, Andy Lutomirski wrote: Essentially, it's a performance problem. knfsd has override_creds, and it can cache struct cred. But userspace doing the same thing (i.e. impersonating a user) has to do setresuid, setresgid, and setgroups, which kills performance, since it

Re: Thoughts on credential switching

2014-03-27 Thread Jeff Layton
On Wed, 26 Mar 2014 20:25:35 -0700 Jeff Layton wrote: > On Wed, 26 Mar 2014 20:05:16 -0700 > Andy Lutomirski wrote: > > > On Wed, Mar 26, 2014 at 7:48 PM, Jeff Layton > > wrote: > > > On Wed, 26 Mar 2014 17:23:24 -0700 > > > Andy Lutomirski wrote: > > > > > >> Hi various people who care

Re: Thoughts on credential switching

2014-03-27 Thread Jeff Layton
On Thu, 27 Mar 2014 14:06:32 +0100 Florian Weimer wrote: > On 03/27/2014 02:02 PM, Jeff Layton wrote: > > >> This interface does not address the long-term lack of POSIX > >> compliance in setuid and friends, which are required to be > >> process-global and not thread-specific (as they are on

Re: Thoughts on credential switching

2014-03-27 Thread Boaz Harrosh
On 03/27/2014 03:06 PM, Florian Weimer wrote: > On 03/27/2014 02:02 PM, Jeff Layton wrote: > >>> This interface does not address the long-term lack of POSIX >>> compliance in setuid and friends, which are required to be >>> process-global and not thread-specific (as they are on the kernel >>>

Re: Thoughts on credential switching

2014-03-27 Thread Florian Weimer
On 03/27/2014 02:02 PM, Jeff Layton wrote: This interface does not address the long-term lack of POSIX compliance in setuid and friends, which are required to be process-global and not thread-specific (as they are on the kernel side). glibc works around this by reserving a signal and running

Re: Thoughts on credential switching

2014-03-27 Thread Jeff Layton
On Thu, 27 Mar 2014 13:46:06 +0100 Florian Weimer wrote: > On 03/27/2014 01:23 AM, Andy Lutomirski wrote: > > > I propose the following set of new syscalls: > > > > int credfd_create(unsigned int flags): returns a new credfd that > > corresponds to current's creds. > > > > int

Re: Thoughts on credential switching

2014-03-27 Thread Florian Weimer
On 03/27/2014 01:23 AM, Andy Lutomirski wrote: I propose the following set of new syscalls: int credfd_create(unsigned int flags): returns a new credfd that corresponds to current's creds. int credfd_activate(int fd, unsigned int flags): Change current's creds to match the creds stored in fd.

Re: Thoughts on credential switching

2014-03-27 Thread Florian Weimer
On 03/27/2014 01:23 AM, Andy Lutomirski wrote: I propose the following set of new syscalls: int credfd_create(unsigned int flags): returns a new credfd that corresponds to current's creds. int credfd_activate(int fd, unsigned int flags): Change current's creds to match the creds stored in fd.

Re: Thoughts on credential switching

2014-03-27 Thread Jeff Layton
On Thu, 27 Mar 2014 13:46:06 +0100 Florian Weimer fwei...@redhat.com wrote: On 03/27/2014 01:23 AM, Andy Lutomirski wrote: I propose the following set of new syscalls: int credfd_create(unsigned int flags): returns a new credfd that corresponds to current's creds. int

Re: Thoughts on credential switching

2014-03-27 Thread Florian Weimer
On 03/27/2014 02:02 PM, Jeff Layton wrote: This interface does not address the long-term lack of POSIX compliance in setuid and friends, which are required to be process-global and not thread-specific (as they are on the kernel side). glibc works around this by reserving a signal and running

Re: Thoughts on credential switching

2014-03-27 Thread Boaz Harrosh
On 03/27/2014 03:06 PM, Florian Weimer wrote: On 03/27/2014 02:02 PM, Jeff Layton wrote: This interface does not address the long-term lack of POSIX compliance in setuid and friends, which are required to be process-global and not thread-specific (as they are on the kernel side). glibc

Re: Thoughts on credential switching

2014-03-27 Thread Jeff Layton
On Thu, 27 Mar 2014 14:06:32 +0100 Florian Weimer fwei...@redhat.com wrote: On 03/27/2014 02:02 PM, Jeff Layton wrote: This interface does not address the long-term lack of POSIX compliance in setuid and friends, which are required to be process-global and not thread-specific (as they

Re: Thoughts on credential switching

2014-03-27 Thread Jeff Layton
On Wed, 26 Mar 2014 20:25:35 -0700 Jeff Layton jlay...@redhat.com wrote: On Wed, 26 Mar 2014 20:05:16 -0700 Andy Lutomirski l...@amacapital.net wrote: On Wed, Mar 26, 2014 at 7:48 PM, Jeff Layton jlay...@redhat.com wrote: On Wed, 26 Mar 2014 17:23:24 -0700 Andy Lutomirski

Re: Thoughts on credential switching

2014-03-27 Thread Florian Weimer
On 03/27/2014 02:01 AM, Andy Lutomirski wrote: Essentially, it's a performance problem. knfsd has override_creds, and it can cache struct cred. But userspace doing the same thing (i.e. impersonating a user) has to do setresuid, setresgid, and setgroups, which kills performance, since it

Re: Thoughts on credential switching

2014-03-27 Thread Andy Lutomirski
On Thu, Mar 27, 2014 at 8:41 AM, Florian Weimer fwei...@redhat.com wrote: On 03/27/2014 02:01 AM, Andy Lutomirski wrote: Essentially, it's a performance problem. knfsd has override_creds, and it can cache struct cred. But userspace doing the same thing (i.e. impersonating a user) has to do

Re: Thoughts on credential switching

2014-03-27 Thread Jeremy Allison
On Thu, Mar 27, 2014 at 07:01:26AM -0700, Jeff Layton wrote: On Thu, 27 Mar 2014 14:06:32 +0100 Florian Weimer fwei...@redhat.com wrote: On 03/27/2014 02:02 PM, Jeff Layton wrote: This interface does not address the long-term lack of POSIX compliance in setuid and friends, which are

Re: Thoughts on credential switching

2014-03-27 Thread Andy Lutomirski
On Thu, Mar 27, 2014 at 11:26 AM, Jeremy Allison j...@samba.org wrote: Amen to that :-). However, after talking with Jeff and Jim at CollabSummit, I was 'encouraged' to make my opinions known on the list. To me, calling the creds handle a file descriptor just feels wrong. IT *isn't* an fd,

Re: Thoughts on credential switching

2014-03-27 Thread Jeremy Allison
On Thu, Mar 27, 2014 at 11:46:39AM -0700, Andy Lutomirski wrote: On Thu, Mar 27, 2014 at 11:26 AM, Jeremy Allison j...@samba.org wrote: Amen to that :-). However, after talking with Jeff and Jim at CollabSummit, I was 'encouraged' to make my opinions known on the list. To me,

Re: Thoughts on credential switching

2014-03-27 Thread Andy Lutomirski
On Thu, Mar 27, 2014 at 11:56 AM, Jeremy Allison j...@samba.org wrote: On Thu, Mar 27, 2014 at 11:46:39AM -0700, Andy Lutomirski wrote: On Thu, Mar 27, 2014 at 11:26 AM, Jeremy Allison j...@samba.org wrote: Amen to that :-). However, after talking with Jeff and Jim at CollabSummit, I

Re: Re: Thoughts on credential switching

2014-03-27 Thread Jim Lieb
Rather than inline, I'm responding in the context of Jeremy's comments but I have to answer others as well. It is Jeremy after all who said my baby was ugly ;). Jeremy is right about overloading fd. Maybe I can call it something else but an fd (in implementation) has merit because a creds

Re: Re: Thoughts on credential switching

2014-03-27 Thread Andy Lutomirski
On Thu, Mar 27, 2014 at 12:30 PM, Jim Lieb jl...@panasas.com wrote: Rather than inline, I'm responding in the context of Jeremy's comments but I have to answer others as well. It is Jeremy after all who said my baby was ugly ;). Jeremy is right about overloading fd. Maybe I can call it

Re: Re: Re: Thoughts on credential switching

2014-03-27 Thread Jim Lieb
On Thursday, March 27, 2014 12:45:30 Andy Lutomirski wrote: On Thu, Mar 27, 2014 at 12:30 PM, Jim Lieb jl...@panasas.com wrote: Rather than inline, I'm responding in the context of Jeremy's comments but I have to answer others as well. It is Jeremy after all who said my baby was ugly ;).

Re: Re: Re: Thoughts on credential switching

2014-03-27 Thread Andy Lutomirski
On Thu, Mar 27, 2014 at 1:47 PM, Jim Lieb jl...@panasas.com wrote: On Thursday, March 27, 2014 12:45:30 Andy Lutomirski wrote: On Thu, Mar 27, 2014 at 12:30 PM, Jim Lieb jl...@panasas.com wrote: Rather than inline, I'm responding in the context of Jeremy's comments but I have to answer

Re: Thoughts on credential switching

2014-03-26 Thread Jeff Layton
On Wed, 26 Mar 2014 20:05:16 -0700 Andy Lutomirski wrote: > On Wed, Mar 26, 2014 at 7:48 PM, Jeff Layton > wrote: > > On Wed, 26 Mar 2014 17:23:24 -0700 > > Andy Lutomirski wrote: > > > >> Hi various people who care about user-space NFS servers and/or > >> security-relevant APIs. > >> > >> I

Re: Thoughts on credential switching

2014-03-26 Thread Andy Lutomirski
On Wed, Mar 26, 2014 at 7:48 PM, Jeff Layton wrote: > On Wed, 26 Mar 2014 17:23:24 -0700 > Andy Lutomirski wrote: > >> Hi various people who care about user-space NFS servers and/or >> security-relevant APIs. >> >> I propose the following set of new syscalls: >> >> int credfd_create(unsigned int

Re: Thoughts on credential switching

2014-03-26 Thread Jeff Layton
On Wed, 26 Mar 2014 17:23:24 -0700 Andy Lutomirski wrote: > Hi various people who care about user-space NFS servers and/or > security-relevant APIs. > > I propose the following set of new syscalls: > > int credfd_create(unsigned int flags): returns a new credfd that > corresponds to current's

Re: Thoughts on credential switching

2014-03-26 Thread Andy Lutomirski
On Wed, Mar 26, 2014 at 5:42 PM, Serge Hallyn wrote: > Quoting Andy Lutomirski (l...@amacapital.net): >> Hi various people who care about user-space NFS servers and/or >> security-relevant APIs. >> >> I propose the following set of new syscalls: >> >> int credfd_create(unsigned int flags):

Re: Thoughts on credential switching

2014-03-26 Thread Serge Hallyn
Quoting Andy Lutomirski (l...@amacapital.net): > Hi various people who care about user-space NFS servers and/or > security-relevant APIs. > > I propose the following set of new syscalls: > > int credfd_create(unsigned int flags): returns a new credfd that > corresponds to current's creds. > >

Thoughts on credential switching

2014-03-26 Thread Andy Lutomirski
Hi various people who care about user-space NFS servers and/or security-relevant APIs. I propose the following set of new syscalls: int credfd_create(unsigned int flags): returns a new credfd that corresponds to current's creds. int credfd_activate(int fd, unsigned int flags): Change current's

Thoughts on credential switching

2014-03-26 Thread Andy Lutomirski
Hi various people who care about user-space NFS servers and/or security-relevant APIs. I propose the following set of new syscalls: int credfd_create(unsigned int flags): returns a new credfd that corresponds to current's creds. int credfd_activate(int fd, unsigned int flags): Change current's

Re: Thoughts on credential switching

2014-03-26 Thread Serge Hallyn
Quoting Andy Lutomirski (l...@amacapital.net): Hi various people who care about user-space NFS servers and/or security-relevant APIs. I propose the following set of new syscalls: int credfd_create(unsigned int flags): returns a new credfd that corresponds to current's creds. int

Re: Thoughts on credential switching

2014-03-26 Thread Andy Lutomirski
On Wed, Mar 26, 2014 at 5:42 PM, Serge Hallyn serge.hal...@ubuntu.com wrote: Quoting Andy Lutomirski (l...@amacapital.net): Hi various people who care about user-space NFS servers and/or security-relevant APIs. I propose the following set of new syscalls: int credfd_create(unsigned int

Re: Thoughts on credential switching

2014-03-26 Thread Jeff Layton
On Wed, 26 Mar 2014 17:23:24 -0700 Andy Lutomirski l...@amacapital.net wrote: Hi various people who care about user-space NFS servers and/or security-relevant APIs. I propose the following set of new syscalls: int credfd_create(unsigned int flags): returns a new credfd that corresponds

Re: Thoughts on credential switching

2014-03-26 Thread Andy Lutomirski
On Wed, Mar 26, 2014 at 7:48 PM, Jeff Layton jlay...@redhat.com wrote: On Wed, 26 Mar 2014 17:23:24 -0700 Andy Lutomirski l...@amacapital.net wrote: Hi various people who care about user-space NFS servers and/or security-relevant APIs. I propose the following set of new syscalls: int

Re: Thoughts on credential switching

2014-03-26 Thread Jeff Layton
On Wed, 26 Mar 2014 20:05:16 -0700 Andy Lutomirski l...@amacapital.net wrote: On Wed, Mar 26, 2014 at 7:48 PM, Jeff Layton jlay...@redhat.com wrote: On Wed, 26 Mar 2014 17:23:24 -0700 Andy Lutomirski l...@amacapital.net wrote: Hi various people who care about user-space NFS servers