Re: Vnode scope implementation

[yamt%mwd.biglobe.ne.jp@localhost (YAMAMOTO Takashi)]

hi,

>>>> - what's your plan about filesystems for which it can might impossible
>>>>  to alter filesystem's decisions?  eg. nfs
>>>
>>> I don't have a plan for NFS yet. Does it affect the kauth(9)
>>> integration with all of our other file-systems, though?
>>
>> a design which works only for some of filesystems is considered broken,
>> or less useful at least.  can you please provide a rough plan?
> 
> Well, I'm not too familiar with NFS, so let's see. Where do things
> start falling apart when NFS comes into the equation?

for nfs, the permission check is done on the server.
so kauth can't allow operations which is denied by the filesystem.
ie. kauth can't have the final word.

YAMAMOTO Takashi

> 
> Thanks,
> 
> -e.