Re: [PATCH] lomount.c: don't use mlockall if CRYPT_NONE

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Jul 10, 2007 at 05:54:39AM +0900, Masatake YAMATO wrote:
> Hi,
> 
> > > Hi,
> > > 
> > > I'm writing a command that installs all src.rpms in a ISO
> > > images to a system. I'd like to make the command require
> > > fewer privilege as possible.
> > > 
> > > loop back mounting emits two system calls: mount and mlockall.
> > > mount is obviously needed. mlockall is needed for encryption.
> > > As the result both CAP_SYS_ADMIN and CAP_IPC_LOCK are needed
> > > to do loopback mounting.
> > > 
> > > The problem is that CAP_IPC_LOCK is always needed through my 
> > > command doesn't need encryption.
> > > 
> > > With the following patch, mount calls mlockall only when
> > > encryption is needed. Could you introduce this patch?
> > 
> >  Yes, I'll commit your patch ASAP. Thanks.
> > 
> >     Karel
> 
> The patch is not merged yet. Could you take a look?

 Sorry, applied. Thanks.

    Karel

-- 
 Karel Zak  <kzak@xxxxxxxxxx>
-
To unsubscribe from this list: send the line "unsubscribe util-linux-ng" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux Admin]     [Samba]

  Powered by Linux