Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755671Ab3IZDDF (ORCPT ); Wed, 25 Sep 2013 23:03:05 -0400 Received: from zeniv.linux.org.uk ([195.92.253.2]:38794 "EHLO ZenIV.linux.org.uk" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751283Ab3IZDDD (ORCPT ); Wed, 25 Sep 2013 23:03:03 -0400 Date: Thu, 26 Sep 2013 04:02:54 +0100 From: Al Viro To: Linus Torvalds Cc: Djalal Harouni , "Eric W. Biederman" , Kees Cook , Andrew Morton , Ingo Molnar , "Serge E. Hallyn" , Cyrill Gorcunov , LKML , linux-fsdevel , "kernel-hardening@lists.openwall.com" , tixxdz@gmail.com Subject: Re: [PATCH 04/12] seq_file: Make seq_file able to access the file's opener cred Message-ID: <20130926030254.GF13318@ZenIV.linux.org.uk> References: <1380140085-29712-1-git-send-email-tixxdz@opendz.org> <1380140085-29712-5-git-send-email-tixxdz@opendz.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1519 Lines: 32 On Wed, Sep 25, 2013 at 05:22:51PM -0700, Linus Torvalds wrote: > On Wed, Sep 25, 2013 at 1:14 PM, Djalal Harouni wrote: > > > > Therefor add the f_cred field to the seq_file struct and a helper > > seq_f_cred() to return it. > > I hate how you've split up this patch from the next one that actually > _initializes_ the new field. > > The two patches should have been one. > > I think the patch should also remove the 'user_ns' member, since it's > now available as f_cred->user_ns. > > I also suspect that it would be better to just make the the new > seq_file member point to the 'struct file' instead. Sure, it's an > extra level of indirection, but the lifetime of f_cred is not as clear > otherwise. You don't increment the reference count, which is correct > *only* because 'seq_file' has the same lifetime as 'struct file', and > thus the reference count from struct file for the f_cred is > sufficient. That's better than f_cred (or user_ns, for that matter), but... I'm afraid that it'll get abused very soon. And I don't understand the argument about the lifetime rules - what makes struct file ones different from struct cred ones in that respect? Except that in this case it's really obvious that we can't grab a reference, that is... -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/