rename "security" as an objdb key to "uidgid".

The uid || gid should be valid, not requiring an and operation.

On Wed, 2009-05-13 at 18:21 +0200, Jan Friesse wrote:
> Attached is first version of support for multiple security items (uid-gid).
> 
> First question what I have. I'm currently testing uid and gid as a pair,
> so user process must have gid and uid (not only uid or gid). Is that
> correct, or you will rather see something, what will check uid OR gid?
> (From my point of view, both solution are acceptable and both have some
> pros/cons, so I think, there should be major consensus)
> 
or operation

> Second question. Items are cached, but in list. Steve talked something
> about, that this is fast path, so isn't list some performance killer? If
> yes, I think we can use:
> - hash table (red black tree/...) in case 1. question will be answered,
> that we should check uid and gid as a pair
> - bit-array of uid and gid, if 1. question will be answered uid OR gid
> 
A list should be ok for now.

> Third question. I'm not sure, if I should implement some reloading stuff
> or not. Because in current implementation, ug_config.uid/gid are never
> reloaded, and only logstuff is reloaded.
> 

followup patch imo

> Fourth think. From my point of view. ug_config.uid/gid no longer make
> sense to be used for IPC authentifications (becase this patch should be
> full and better replacement), so second patch (corosync-remove-...)
> removes this.
> 

ok

> And last think. Can please somebody with native English language update
> manual pages? Of course I can do that, but ... I'm not sure that my
> Czechlish is understandable to anybody different then me, and you, as my
> colleagues ;)
> 

right up there with root canals.  The man pages need love, and we will
get to them eventually.

Regards
-steve

> Regards,
>   Honza
> _______________________________________________
> Openais mailing list
> Openais@lists.linux-foundation.org
> https://lists.linux-foundation.org/mailman/listinfo/openais

_______________________________________________
Openais mailing list
Openais@lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/openais

Reply via email to