On Tue, 2018-06-05 at 06:43 -0700, Kees Cook wrote: > On Tue, Jun 5, 2018 at 6:25 AM, Serge E. Hallyn <serge@xxxxxxxxxx> wrote: > > Quoting Kees Cook (keescook@xxxxxxxxxxxx): > >> On Mon, Jun 4, 2018 at 9:09 PM, Serge E. Hallyn <serge@xxxxxxxxxx> wrote: > >> > Personally I agree with Eric and prefer a new hook. I don't feel strongly > >> > enough about it to keep bikeshedding, but since this set already exists, > >> > it seems like the way to go. > >> > >> And the new hook is "load stuff without a file descriptor"? > > > > Yes. Load stuff based on my own credentials not those attached > > to a file. > > Okay, I can live with that. :) Can I get your Ack on the loadpin changes in v4a patch 8/8? Mimi
