Re: [PATCH 2/2] security.capability: fix conversions on getxattr

On Thu, Jan 28, 2021 at 9:24 PM Eric W. Biederman [off-list ref] wrote:

<aside>
From our previous discussions I would also argue it would be good
if there was a bypass that skipped all conversions if the reader
and the filesystem are in the same user namespace.
</aside>

That's however just an optimization (AFAICS) that only makes sense if
it helps a read world workload.   I'm not convinced that that's the
case.

Thanks,
Miklos