rename "security" as an objdb key to "uidgid". The uid || gid should be valid, not requiring an and operation.
On Wed, 2009-05-13 at 18:21 +0200, Jan Friesse wrote: > Attached is first version of support for multiple security items (uid-gid). > > First question what I have. I'm currently testing uid and gid as a pair, > so user process must have gid and uid (not only uid or gid). Is that > correct, or you will rather see something, what will check uid OR gid? > (From my point of view, both solution are acceptable and both have some > pros/cons, so I think, there should be major consensus) > or operation > Second question. Items are cached, but in list. Steve talked something > about, that this is fast path, so isn't list some performance killer? If > yes, I think we can use: > - hash table (red black tree/...) in case 1. question will be answered, > that we should check uid and gid as a pair > - bit-array of uid and gid, if 1. question will be answered uid OR gid > A list should be ok for now. > Third question. I'm not sure, if I should implement some reloading stuff > or not. Because in current implementation, ug_config.uid/gid are never > reloaded, and only logstuff is reloaded. > followup patch imo > Fourth think. From my point of view. ug_config.uid/gid no longer make > sense to be used for IPC authentifications (becase this patch should be > full and better replacement), so second patch (corosync-remove-...) > removes this. > ok > And last think. Can please somebody with native English language update > manual pages? Of course I can do that, but ... I'm not sure that my > Czechlish is understandable to anybody different then me, and you, as my > colleagues ;) > right up there with root canals. The man pages need love, and we will get to them eventually. Regards -steve > Regards, > Honza > _______________________________________________ > Openais mailing list > Openais@lists.linux-foundation.org > https://lists.linux-foundation.org/mailman/listinfo/openais _______________________________________________ Openais mailing list Openais@lists.linux-foundation.org https://lists.linux-foundation.org/mailman/listinfo/openais