On Wed, Feb 04, 2015 at 03:52:02PM +0100, Lukáš Czerner wrote: > > I'm happy for all the feedback. But it doesn't help me. I'm not going to spend > > the necessary time unpaid. > > Right, you'd much rather have someone else to spend the time on your > request unpaid. That's understandable, but unreasonable. You want > it, implement it, or pay someone else to do it for you. > > > It doesn't help me nor anyone else. As Eric Sandeen made me aware through in > > bug, look at http://lwn.net/Articles/462437/ what already happened. > > That's what people have been trying to tell you. It's not an easy > task and there are plenty of cases to think about. As you can see > IBM tasked their developer to do it, but they did not succeed. And > here you come with your simplistic patches crying about "high > towers. But you're the one apparently interested in this feature > and you've been warned that's it's not a simple task. And indeed, people who do have salaries paid by companies who care about this general problem in actual products have been working on addressing it using encryption, such that when the user is removed from the device, the key is blasted. More importantly, when the user is not logged in, the key isn't even *available* on the device. So it solves more problems than the one that you are concerned about, and in general maintainers prefer solutions that solve multiple problems, because that minimizes the number of one-time hacks and partial/toy solutions which turn into long-term maintainance headaches. (After all, if you insist on having a partial/toy solution merged, that turns into an unfunded mandate which the maintainers effectively have to support for free, forever.) You've rejected encryption as a proposed solution as not meeting your requirements (which if I understand your objections, can be summarized as "encryption is too hard"). This is fine, but if you want someone *else* to implement your partial toy solution which is less secure, then you will either need to pay someone to do it or do it yourself. > > Wrong. I don't want my partial solution to be part of the official kernel. I > > don't care. I offered it for other users because I'm aware that has become > > almost impossible for normal people to get something into the kernel without > > spending an unbelievable amount of time most people can't afford to spend. So you expect other users to just apply your patches and use an unofficial system call number that might get reassigned to some other user later on? If that's all you want, then ok, you're done. The patches have been posted to LKML, and you can give people URL's if they want to try applying the patches on their own. Cheers, - Ted -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
