YAMAMOTO Takashi wrote:
>>> sorry, it wasn't fine actually.
>>> it can't work because dev_t has separate namespaces for
>>> block and char devices.
>> hence the "please review" in the unified vchr/vblk handling. :)
>>
>> what do you suggest? KAUTH_DEVICE_RAWIO_BLOCK/CHAR?
> 
> again, my preference is something like this. :-)
> 	int kauth_authorize_device_specopen(cred, vp, r/w);
> 	int kauth_authorize_device_passthru(cred, dev_t, void *);

the first one is new. ;)

what do we pass to iskmemdev()? I assume we don't want to issue a
VOP_GETATTR() on vp?

-e.

-- 
Elad Efrat