On Wed, Jul 13, 2016 at 11:21:16AM -0600, Jason Gunthorpe wrote: > On Wed, Jul 13, 2016 at 07:57:04PM +0300, Matan Barak wrote: > > > Maybe instead of having an idr per device, it's better to have an idr per > > uverbs file. > > Oh, I thought you were doing that already! > > Yes, the idr must be per ucontext, otherwise we create a big security > problem. Access to one files object #'s cannot be allowed from another > file. On top of the Matan's response, regarding no security issue here. I didn't see added value in multiplying IDRs, which would be if creation per-file is done.
Attachment:
signature.asc
Description: Digital signature
