Received: by 2002:ab2:6816:0:b0:1f9:5764:f03e with SMTP id t22csp1454900lqo; Sat, 18 May 2024 04:08:26 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCWercs1y7mig+pb24gLSlK5OfIXufxnpOISK6oa7DkWQCFaaSzp/Cm26p+J0QeqBBiWdWGmVHX2UaMT8b+6NhIsvJKaroGo/Fwteln6kw== X-Google-Smtp-Source: AGHT+IE0Anxy06jKFRdYCGLYKb+lzFl9TSn+SHf1pqYfK3wwpDID5sCHKecN0j4F03HFL/gBJUKe X-Received: by 2002:a9d:7403:0:b0:6f0:7c4f:11b0 with SMTP id 46e09a7af769-6f0e911e8c7mr25032735a34.10.1716030506650; Sat, 18 May 2024 04:08:26 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1716030506; cv=pass; d=google.com; s=arc-20160816; b=Wg5F6U2NKQ5mpcS2La8wDfWOHL8XwGzjKBiwmT9F6jszpUxWLSA/Ph4F/i6k9EOgkV hjyaiSYnOZDnd35H2+vK3RS9pxqesqpxku2FRHHwB21KrmMA+cyrA5bzphrAlulratSY 0hstRUQv452EJhMxzXKJmlSsHgGgAzATVMJUo6XuuN0IuRQ9PKXqPb4TQlQHS6b9MWCF fVoGvTzByXSccA+SPk730hwWaxmOWDVw6AYhHSJkRAd69IgqgAiN/8iQFHbwM94YQA5v Huet7G5eOSTARwMxC3YiBdEY5GjkFy0F2Zi0vPuAGzHpoh+tarE9Zch4azSCVAECYsdY JHrg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=in-reply-to:references:cc:to:from:subject:message-id:date :content-transfer-encoding:mime-version:list-unsubscribe :list-subscribe:list-id:precedence:dkim-signature; bh=HXbBUzug7U+V2vfPNBsz3+xipJXzt7YurgJFoKWIqEY=; fh=87Zjc6qt444O7evxEJbyHDZypEYUdyw0YtBeKRIdr5U=; b=HFLCcWXLDRWtYQjXYg1oF6u/iFhQLu81SSljHD1OlbFKqIYLFAG2h5WcumiN0aL3wu kzFBwygYbZXKE4hKPm1yMcCWfK1u/F5d5djKqbHArb6Ysi8XnnPoFFNmYaEf0vo71iBR /UQmHj/5q0a6404Hz14Coh6vzkmcln4TlvidvrwShUZ/njgycE4nuash+cyvF0is54gd eIP/poltouiaw19qF2A4PqG1pU27agQa8u912XW8KopBvemf5PQ/HsDtCPzX4Bz2Vysf d5v4es0Kpq9D5HASu+MSnNqoDP+6wrmoHdmH4GveJ+ewCisfr9OrVZhlN+4SRJmwOMtk pKEg==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=MIvX89AP; arc=pass (i=1 dkim=pass dkdomain=kernel.org); spf=pass (google.com: domain of linux-kernel+bounces-182824-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) smtp.mailfrom="linux-kernel+bounces-182824-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from ny.mirrors.kernel.org (ny.mirrors.kernel.org. [147.75.199.223]) by mx.google.com with ESMTPS id af79cd13be357-792bf33b561si2017922385a.477.2024.05.18.04.08.26 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 18 May 2024 04:08:26 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel+bounces-182824-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) client-ip=147.75.199.223; Authentication-Results: mx.google.com; dkim=pass header.i=@kernel.org header.s=k20201202 header.b=MIvX89AP; arc=pass (i=1 dkim=pass dkdomain=kernel.org); spf=pass (google.com: domain of linux-kernel+bounces-182824-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) smtp.mailfrom="linux-kernel+bounces-182824-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ny.mirrors.kernel.org (Postfix) with ESMTPS id 5A5641C20E5D for ; Sat, 18 May 2024 11:08:26 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id C221E2E417; Sat, 18 May 2024 11:08:16 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="MIvX89AP" Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D7E5C2E3FE; Sat, 18 May 2024 11:08:15 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716030496; cv=none; b=SJ3RX0OMFqCMybf4M8fqyf6NhssIjo2cwE82sO9/++jvmh3iWz8VJvVA+uYJQe479jvYrC1KKR/BgZQyQ5uN+f0/7xNwGQC23m1PRSLX0zbjPaCSl2FNG0n8gqC2W/x8Lyr3F8qqj0OTf4+mCZVCrSETZTUXIjQrOxxVIEDfH3w= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716030496; c=relaxed/simple; bh=HXbBUzug7U+V2vfPNBsz3+xipJXzt7YurgJFoKWIqEY=; h=Mime-Version:Content-Type:Date:Message-Id:Subject:From:To:Cc: References:In-Reply-To; b=pQA6Q9lGwB7HjqXcXm+psMkasU7FLnPqjiW4S3OXY+qO4lxJ7POIpYDflKgQWBdo0VsJ5aKAAkgd5rCxcI0DzECy5e2YuSbkoZCSQ3E4Pv4V2Z8ADthOkmQ69rXT1inde0OYbvy/pd9d/6SRHuJetySs5TdEfKXifg6A8HWhots= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=MIvX89AP; arc=none smtp.client-ip=10.30.226.201 Received: by smtp.kernel.org (Postfix) with ESMTPSA id E4A66C113CC; Sat, 18 May 2024 11:08:11 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1716030495; bh=HXbBUzug7U+V2vfPNBsz3+xipJXzt7YurgJFoKWIqEY=; h=Date:Subject:From:To:Cc:References:In-Reply-To:From; b=MIvX89AP8dU1e/0W56FnUOvYR2BFANvmkcxTg2AB4Wnt120QafMqu6ehIH5wtutsp dpA4LSS4tO/2rqt2FrV3umvujxDxwyzQsFe3oGQLH83pqZdOXa+MuTrEVZwAU2fbQ9 Ht2e/3ir19vOGbCjsWFfds8D/JYEwJJMiDTXo5Zf2i/gxq56OWSCvkBH0meGFq1f4H ZS1P4e6txqfRk72du09hjUJPsdfJKvioOypaDP7GFkkmPBVuFosDwDDdIz/j9eOf2V M5LKNG1L7i0ifUk6/8uilS2EdBe4EOS8Q3lvvIwcmwOdIdtbks9O/XWqRnb+v180pN aH53POQPngOhQ== Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=UTF-8 Date: Sat, 18 May 2024 14:08:09 +0300 Message-Id: Subject: Re: [PATCH 0/3] Introduce user namespace capabilities From: "Jarkko Sakkinen" To: "Jonathan Calmels" , "Casey Schaufler" Cc: , , "Luis Chamberlain" , "Kees Cook" , "Joel Granados" , "Serge Hallyn" , "Paul Moore" , "James Morris" , "David Howells" , , , , , X-Mailer: aerc 0.17.0 References: <20240516092213.6799-1-jcalmels@3xx0.net> <2804dd75-50fd-481c-8867-bc6cea7ab986@schaufler-ca.com> In-Reply-To: On Fri May 17, 2024 at 10:11 PM EEST, Jonathan Calmels wrote: > On Fri, May 17, 2024 at 10:53:24AM GMT, Casey Schaufler wrote: > > Of course they do. I have been following the use of capabilities > > in Linux since before they were implemented. The uptake has been > > disappointing in all use cases. > > Why "Of course"? > What if they should not get *all* privileges? They do the job given a real-world workload and stress test. Here the problem is based on a theory and an experiment. Even a formal model does not necessarily map all "unknown unknowns". BR, Jarkko