Re: [RFC] lsm: namespace hooks

Am 27.11.2014 um 15:44 schrieb Lukasz Pawelczyk:

On czw, 2014-11-27 at 15:38 +0100, Richard Weinberger wrote:

quoted

Am 27.11.2014 um 15:35 schrieb Lukasz Pawelczyk:

quoted

On czw, 2014-11-27 at 15:18 +0100, Richard Weinberger wrote:

quoted

On Thu, Nov 27, 2014 at 3:01 PM, Lukasz Pawelczyk
[off-list ref] wrote:

quoted

-/* 0x02000000 was previously the unused CLONE_STOPPED (Start in stopped state)
-   and is now available for re-use. */
+#define CLONE_NEWLSM           0x02000000      /* New LSM namespace */

FYI, CLONE_NEWCGROUP also claims last flag [1].

Yes, I'm perfectly aware of that. I've seen those patches.
This is RFC for now and CGROUP NS is not merged yet. I'll rebase when
time comes.

Just wanted to indicate that we run out of constants. :)

True, the last one is 0x80000000. I did not notice that. Thanks for
pointing out.

Isn't this CLONE_IO?

Any suggestion on what can be done here? New syscal with flags2?

I'm not sure. But a new syscall would be a candidate.

Thanks,
//richard

On czw, 2014-11-27 at 16:01 +0100, Richard Weinberger wrote:

Am 27.11.2014 um 15:44 schrieb Lukasz Pawelczyk:

quoted

True, the last one is 0x80000000. I did not notice that. Thanks for
pointing out.

Isn't this CLONE_IO?

Yes, I was merely noticing out loud that it's the last bit of 32bit.

After close look though the 0x00001000 appears to be unused

quoted

Any suggestion on what can be done here? New syscal with flags2?

I'm not sure. But a new syscall would be a candidate.

-- 
Lukasz Pawelczyk
Samsung R&D Institute Poland
Samsung Electronics