Subject: Re: kauth and access to process credentials
To: David Laight <david@l8s.co.uk>
From: Thor Lancelot Simon <tls@rek.tjls.com>
List: tech-security
Date: 02/18/2007 10:34:02
On Sun, Feb 18, 2007 at 02:10:23PM +0000, David Laight wrote:
> The kauth code seems to be full of wrapper functions.
> 
> In particular every peice of code that needs to look at one of the
> process's uids ends up calling a function.
> This might be reasonable for LKMs, but for code that is linked into the
> main kernel image rather OTT.
> 
> Of course, this involves making the structure in kauth_impl.h publicly
> visible :-)

I actually prefer that access to UIDs be opaque in this way and think
it's a useful architectural feature of kauth.

Why don't we put the accessor functions in a header file and make them
inline?

Thor