On Tue, Nov 06, 2007 at 05:06:23PM -0800, Linus Torvalds wrote:
>
>
> On Wed, 7 Nov 2007, Adrian Bunk wrote:
> >
> > How should TOMOYO implement it's "match one character" in a pattern
> > (used to allow or deny access in a name-based MAC)?
>
> .. I think such a design is fundamentally bogus. You don't have
> "characters". You have "bytes".
Users are used to work on characters, not on bytes.
> So you either implement "match one byte", or you go crazy. It's that
> simple.
Sure, you can limit what is possible and what not.
But there are still many pitfalls, e.g. if someone would allow the
construct "[abc]" in patterns for matching one of these characters you'd
have to ensure that your syntax contains explicit character delimiters
or a pattern might match something completely different from what was
intended.
My opinion is that extended parsing of non-ASCII strings will cause too
many problems, but it seems we can only agree to disagree on this.
> Linus
cu
Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
