Re: Vnode scope implementation

[yamt%mwd.biglobe.ne.jp@localhost (YAMAMOTO Takashi)]

hi,

> YAMAMOTO Takashi wrote:
>>> On Mon, Jul 13, 2009 at 11:27 AM, Elad Efrat<elad%netbsd.org@localhost> 
>>> wrote:
>>>> Following up on the thread, attached is a diff that introduces the
>>>> vnode scope without any actions on it, along with the bsd44/suser
>>>> listener.
>>> I've received no comments so far on this diff. I'm giving it four more
>>> days and then I'll just check it in...
>> 
>> without any users of the code, you mean?  i don't understand the point.
> 
> Okay. Attached is a diff implementing the vnode scope along with changes
> to tmpfs so it uses it where it currently uses KAUTH_GENERIC_ISSUSER.
> 
> -e.

can you explain what's the point to call kauth when fs_decision is
already non-0?
i don't think it's a good idea to let kauth allow operations which
have already been rejected by the filesystem itself.

YAMAMOTO Takashi