Re: [RFC] [PATCH -mm] file caps: make on-disk capabilities future-proof

2007-02-20 Thread Serge E. Hallyn
Quoting Stephen Smalley ([EMAIL PROTECTED]): > On Mon, 2007-02-19 at 11:01 -0600, Serge E. Hallyn wrote: > > From: Serge E. Hallyn <[EMAIL PROTECTED]> > > Subject: [PATCH -mm] file caps: make on-disk capabilities future-proof > > > > Stephen Smalley has pointed out that the current file

Re: [RFC] [PATCH -mm] file caps: make on-disk capabilities future-proof

2007-02-20 Thread Stephen Smalley
On Mon, 2007-02-19 at 11:01 -0600, Serge E. Hallyn wrote: > From: Serge E. Hallyn <[EMAIL PROTECTED]> > Subject: [PATCH -mm] file caps: make on-disk capabilities future-proof > > Stephen Smalley has pointed out that the current file capabilities > will eventually pose a problem. > > As the

Re: [RFC] [PATCH -mm] file caps: make on-disk capabilities future-proof

2007-02-20 Thread Serge E. Hallyn
Quoting KaiGai Kohei ([EMAIL PROTECTED]): > Hi, Serge. > > Thanks for the information. > I'll update the userspace utilities next weekend. Ok - so this change does make sense to you? Upping _LINUX_CAPABILITY_VERSION seems drastic, but anyone who's already been using the current patch would end

Re: [RFC] [PATCH -mm] file caps: make on-disk capabilities future-proof

2007-02-20 Thread KaiGai Kohei
Hi, Serge. Thanks for the information. I'll update the userspace utilities next weekend. Please wait for a while. Serge E. Hallyn wrote: Stephen Smalley has pointed out that the current file capabilities will eventually pose a problem. As the capability set changes and distributions start

Re: [RFC] [PATCH -mm] file caps: make on-disk capabilities future-proof

2007-02-20 Thread KaiGai Kohei
Hi, Serge. Thanks for the information. I'll update the userspace utilities next weekend. Please wait for a while. Serge E. Hallyn wrote: Stephen Smalley has pointed out that the current file capabilities will eventually pose a problem. As the capability set changes and distributions start

Re: [RFC] [PATCH -mm] file caps: make on-disk capabilities future-proof

2007-02-20 Thread Serge E. Hallyn
Quoting KaiGai Kohei ([EMAIL PROTECTED]): Hi, Serge. Thanks for the information. I'll update the userspace utilities next weekend. Ok - so this change does make sense to you? Upping _LINUX_CAPABILITY_VERSION seems drastic, but anyone who's already been using the current patch would end up

Re: [RFC] [PATCH -mm] file caps: make on-disk capabilities future-proof

2007-02-20 Thread Stephen Smalley
On Mon, 2007-02-19 at 11:01 -0600, Serge E. Hallyn wrote: From: Serge E. Hallyn [EMAIL PROTECTED] Subject: [PATCH -mm] file caps: make on-disk capabilities future-proof Stephen Smalley has pointed out that the current file capabilities will eventually pose a problem. As the capability set

Re: [RFC] [PATCH -mm] file caps: make on-disk capabilities future-proof

2007-02-20 Thread Serge E. Hallyn
Quoting Stephen Smalley ([EMAIL PROTECTED]): On Mon, 2007-02-19 at 11:01 -0600, Serge E. Hallyn wrote: From: Serge E. Hallyn [EMAIL PROTECTED] Subject: [PATCH -mm] file caps: make on-disk capabilities future-proof Stephen Smalley has pointed out that the current file capabilities will

[RFC] [PATCH -mm] file caps: make on-disk capabilities future-proof

2007-02-19 Thread Serge E. Hallyn
Stephen Smalley has pointed out that the current file capabilities will eventually pose a problem. As the capability set changes and distributions start tagging binaries with capabilities, we would like for running an older kernel to not necessarily make those binaries unusable. The following

[RFC] [PATCH -mm] file caps: make on-disk capabilities future-proof

2007-02-19 Thread Serge E. Hallyn
Stephen Smalley has pointed out that the current file capabilities will eventually pose a problem. As the capability set changes and distributions start tagging binaries with capabilities, we would like for running an older kernel to not necessarily make those binaries unusable. The following