Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S935301AbXK3QUy (ORCPT ); Fri, 30 Nov 2007 11:20:54 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1762436AbXK3QUq (ORCPT ); Fri, 30 Nov 2007 11:20:46 -0500 Received: from jbanks.dsl.xmission.com ([204.228.152.159]:35890 "EHLO mail.bakbone.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1761501AbXK3QUp (ORCPT ); Fri, 30 Nov 2007 11:20:45 -0500 X-Greylist: delayed 1865 seconds by postgrey-1.27 at vger.kernel.org; Fri, 30 Nov 2007 11:20:44 EST From: Justin Banks Date: Fri, 30 Nov 2007 08:37:12 -0700 To: Al Viro Cc: Justin Banks , Alan Cox , Jon Masters , Ray Lee , tvrtko.ursulin@sophos.com, Casey Schaufler , Christoph Hellwig , linux-kernel@vger.kernel.org, Valdis.Kletnieks@vt.edu Subject: Re: Out of tree module using LSM Message-ID: <20071130153712.GA7959@bleen.domain.actdsltmp> References: <1196365551.6473.103.camel@perihelion> <20071129214527.1d62056c@the-village.bc.nu> <20071129221238.GF5601@bleen.corp.bb> <20071130014811.GA8181@ftp.linux.org.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20071130014811.GA8181@ftp.linux.org.uk> User-Agent: Mutt/1.5.17 (2007-11-01) Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1261 Lines: 32 Al Viro wrote > On Thu, Nov 29, 2007 at 03:12:38PM -0700, Justin Banks wrote: > > > It's not perfect, but as was recently pointed out, if you can only get > > 98% of the way there rather than 100% is that a reason for not trying to > > make it possible? > > BTW, that's a fine example of a common fallacy: "$FOO is 98% of the way to > $TARGET" does not allow to interpolate the properties of $TARGET to those > of $FOO. > > Telling that a condom is a 98% approximation to platonic ideal of such is > not particulary useful, especially if it turns out that what this number > really means is that there's a hole on its tip covering 2% of surface... Understood, but for this use case (and indexing, probably replication, IDS, and others) hooking at the "normal" VFS layer would provide enough flexibility to do what's needed. I'm not saying it should be done, only that it'd work, provide more use cases for linux, and not be totally unsupportable. -justinb -- Justin Banks BakBone Software justinb@bakbone.com - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/