Re: [PATCH v20 05/23] net: Prepare UDS for security module stacking

On Fri, Sep 4, 2020 at 7:58 PM Casey Schaufler [off-list ref] wrote:

On 9/4/2020 2:53 PM, Paul Moore wrote:

quoted

On Fri, Sep 4, 2020 at 5:35 PM Casey Schaufler [off-list ref] wrote:

quoted

On 9/4/2020 1:08 PM, Paul Moore wrote:

...

quoted

I understand the concerns you mention, they are all valid as far as
I'm concerned, but I think we are going to get burned by this code as
it currently stands.

Yes, I can see that. We're getting burned by the non-extensibility
of secids. It will take someone smarter than me to figure out how to
fit N secids into 32bits without danger of either failure or memory
allocation.

Sooo what are the next steps here?  It sounds like there is some
agreement that the currently proposed unix_skb_params approach is a
problem, but it also sounds like you just want to merge it anyway?

I was sorta hoping for something a bit better.

-- 
paul moore
www.paul-moore.com