- The caps are u32. If all kfuncs use this facility for access control, it's plausible or even likely that 32 is not going to be enough. I suppose it can be turned into u64 and then a proper bitmap later? Maybe good idea to start out with a proper bitmap in the first place? - There are benefits to centralizing all the caps in a single place but it can also be kinda cumbersome. - Even with global defs, the cap adjustments are procedural, not declarative. If it needs to be procedural anyway, I wonder whether the global defs are necessary in the first place. What prevents implementing it the other way around - pass in the calling context and provide helpers and macros to respond yay or nay procedurally. Thanks. -- tejun
