Re: [PATCH v7 5/5] namei: resolveat(2) syscall

2019-05-25 Thread Aleksa Sarai
On 2019-05-25, Linus Torvalds wrote: > In fact, I think resolveat() as a model is fundamentally wrong for yet > another reason: O_CREAT. If you want to _create_ a new file, and you > want to still have the path resolution modifiers in place, the > resolveat() model is broken, because it only

Re: [PATCH v7 5/5] namei: resolveat(2) syscall

2019-05-25 Thread Linus Torvalds
On Sat, May 25, 2019 at 12:03 AM Aleksa Sarai wrote: > > You might not have seen the v8 of this set I sent a few days ago[1]. The > new set includes an example of a feature that is possible with > resolveat(2) but not with the current openat(O_PATH) interface. It's the "forced O_PATH" model that

Re: [PATCH v7 5/5] namei: resolveat(2) syscall

2019-05-25 Thread Aleksa Sarai
On 2019-05-24, Linus Torvalds wrote: > On Tue, May 7, 2019 at 9:44 AM Aleksa Sarai wrote: > > > > The most obvious syscall to add support for the new LOOKUP_* scoping > > flags would be openat(2) (along with the required execveat(2) change > > included in this series). However, there are a few

Re: [PATCH v7 5/5] namei: resolveat(2) syscall

2019-05-24 Thread Linus Torvalds
On Tue, May 7, 2019 at 9:44 AM Aleksa Sarai wrote: > > The most obvious syscall to add support for the new LOOKUP_* scoping > flags would be openat(2) (along with the required execveat(2) change > included in this series). However, there are a few reasons to not do > this: So honestly, this last

[PATCH v7 5/5] namei: resolveat(2) syscall

2019-05-07 Thread Aleksa Sarai
The most obvious syscall to add support for the new LOOKUP_* scoping flags would be openat(2) (along with the required execveat(2) change included in this series). However, there are a few reasons to not do this: * The new LOOKUP_* flags are intended to be security features, and openat(2)