On Tue, Jul 10, 2018 at 6:15 PM Al Viro <viro@xxxxxxxxxxxxxxxxxx> wrote: > > Umm... How about "use credentials of opener for everything"? yeah, we have that for writes in general. Nobody ever actually follows that rule. They may *think* they do, and then they call to some helper that does "capability(CAP_SYS_WHATEVAH)" without even realizing it. But I'm certainly ok with writes, if it's just filling a buffer. Preferably a standard buffer we already have, like a seqfile or pipe (hey, splice!) or whatever. And then you have that final op to actually "commit" the state. Which shouldn't be a write (and not the close). Linus -- To unsubscribe from this list: send the line "unsubscribe linux-api" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html