Date: Fri, 23 Jun 2017 13:39:55 -0500
From: "Serge E. Hallyn" <serge@hallyn.com>
To: "Eric W. Biederman" <ebiederm@xmission.com>
Cc: James Bottomley <James.Bottomley@HansenPartnership.com>,
        "Serge E. Hallyn" <serge@hallyn.com>, zohar@linux.vnet.ibm.com,
        containers@lists.linux-foundation.org, linux-kernel@vger.kernel.org,
        xiaolong.ye@intel.com, linux-security-module@vger.kernel.org,
        lkp@01.org
Subject: Re: [PATCH 0/3] Enable namespaced file capabilities
Message-ID: <20170623183955.GD21137@mail.hallyn.com>
References: <1498157989-11814-1-git-send-email-stefanb@linux.vnet.ibm.com>
 <1498174161.7636.4.camel@HansenPartnership.com>
 <20170622233619.GC2894@mail.hallyn.com>
 <1498176787.7636.11.camel@HansenPartnership.com>
 <87efuaip08.fsf@xmission.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <87efuaip08.fsf@xmission.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 552
Lines: 12

Quoting Eric W. Biederman (ebiederm@xmission.com):
> Even with one xattr of any type there is something appealing about
> putting the logic that limits that xattr to a namespace in the name.  As

Exactly.  That's the idea - from Stefan - that I thought was a worthwhile
improvement over my own previous patch, which puts the logic in the value.
Most of the complaints raised so far about this patchset are just as valid (or
invalid) against my previous patch, but I was particularly interested in
thoughts on this approach versus mine.

thanks,
-serge