Re: memcached permissions

2010-08-27 Thread dormando
pulling it into the tree, since > > that implies we have to maintain it. > > > > > > > > On Fri, 27 Aug 2010, KaiGai Kohei wrote: > > > BTW, how about getting inclusion of this patch? > > > > > (2010/08/16 14:38), KaiGai Kohei wrote: > > &

Re: memcached permissions

2010-08-27 Thread KaiGai
> > > (2010/08/16 14:38), KaiGai Kohei wrote: > > > The attached patch is a revised version of memcached permissions. > > > > The 'calculate' permission has gone, and INCR/DECR requires us > > > both of 'read' and 'write' permiss

Re: memcached permissions

2010-08-27 Thread dormando
BTW, how about getting inclusion of this patch? > > (2010/08/16 14:38), KaiGai Kohei wrote: > > The attached patch is a revised version of memcached permissions. > > > > The 'calculate' permission has gone, and INCR/DECR requires us > > both of 'read&#x

Re: memcached permissions

2010-08-27 Thread KaiGai Kohei
BTW, how about getting inclusion of this patch? (2010/08/16 14:38), KaiGai Kohei wrote: > The attached patch is a revised version of memcached permissions. > > The 'calculate' permission has gone, and INCR/DECR requires us > both of 'read' and 'write'

Re: memcached permissions

2010-08-15 Thread KaiGai Kohei
The attached patch is a revised version of memcached permissions. The 'calculate' permission has gone, and INCR/DECR requires us both of 'read' and 'write' permissions. It means we should switch domain of the client process when we need special treatments to unac

Re: memcached permissions

2010-08-04 Thread KaiGai Kohei
(2010/08/04 10:25), Kelvin Edmison wrote: > I'm still not sure how allowing a 'calculate' permission would be helpful in > this case. Incr and decr allow for incrementing and decrementing by any > amount. There does not seem to be any real difference between that and > 'write' to me. > INCR and

Re: memcached permissions

2010-08-03 Thread Kelvin Edmison
I'm still not sure how allowing a 'calculate' permission would be helpful in this case. Incr and decr allow for incrementing and decrementing by any amount. There does not seem to be any real difference between that and 'write' to me. If a strict security partitioning is desired, then perhaps a

Re: memcached permissions

2010-08-01 Thread KaiGai Kohei
(2010/07/30 22:55), Kelvin Edmison wrote: > While I haven't yet read the patch, I would like to understand why there is > a need for a Calculate permission. Why would someone be granted 'calculate' > permission but not 'write' permission? > > Kelvin > The issue depends on individual user's requi

Re: memcached permissions

2010-07-30 Thread Kelvin Edmison
While I haven't yet read the patch, I would like to understand why there is a need for a Calculate permission. Why would someone be granted 'calculate' permission but not 'write' permission? Kelvin On 30/07/10 12:49 AM, "KaiGai Kohei" wrote: > I'll mainly submit the patch and message to SELinu

memcached permissions

2010-07-29 Thread KaiGai Kohei
I'll mainly submit the patch and message to SELinux community, but please don't hesitate to comment anything from memcached community. The attached patch adds policies to support access controls on key-value items managed by memcached with SELinux engine. Nowadays, various kind of key-va