From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-1.0 required=3.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_PASS, URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id A2CCEC10F01 for ; Wed, 20 Feb 2019 07:01:13 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 6BCF62087B for ; Wed, 20 Feb 2019 07:01:13 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=paul-moore-com.20150623.gappssmtp.com header.i=@paul-moore-com.20150623.gappssmtp.com header.b="G+5tK/0M" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1726527AbfBTHBI (ORCPT ); Wed, 20 Feb 2019 02:01:08 -0500 Received: from mail-lj1-f194.google.com ([209.85.208.194]:33615 "EHLO mail-lj1-f194.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726298AbfBTHBI (ORCPT ); Wed, 20 Feb 2019 02:01:08 -0500 Received: by mail-lj1-f194.google.com with SMTP id f24-v6so19854027ljk.0 for ; Tue, 19 Feb 2019 23:01:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore-com.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=7n3R0LFJo2U7VhZo2UnoL8uJHngbkUminPwgfsqPKDo=; b=G+5tK/0MzLY46/Py/4V9aGTSfZ+YQfTTLAMVS4TC58uZMxoDqJ6QjISPNm9vxxZsnE oGDkmh5cV4YOHygpL350Z22maHptXHAuVWxg3YDMYHi3VB+Cyi41H+tCOmVzN8ZhlCB/ GW+ju7jTGNaLIe3Aj9RiScx6wWGlsDE+G5V1TvgNM83JanhEBeylL9/5ctDtkuEh4uv2 MuzFf9oC64CZRU36vt+T7ZZVpIJWGRa/UzbUf6MD8ofxYrPasIukccjLma8Pu0mIgQ8W IQgsPeFsRudZL/QzUH5+Atpjdd42xzBgHPLpigQGy0t+t6SGVG92UZ0uH1l3Ats9VEyU 7tUA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=7n3R0LFJo2U7VhZo2UnoL8uJHngbkUminPwgfsqPKDo=; b=P4yrq5IwRbNzJhnO8Qe1n2vJoyTayXPR0BK/Z3/lRTM3YbStcrsXAPC3LBH8I6roD/ CFLCaTpwlXR29H4vJEU4SJjJrpa62gEt5OSKGk9Bh2jFkFUzacxeaKqIgQaJIG/5D21h 5OJY56f40zqM+uxvVwkOa/wKTmuspe8ia7b6MaUYbc7RHvmMIJqlUghzL9FKP8LSXnlZ iOw2nK1KHQdExqy1lzaiC4v8NHI+nhHr85uObBHxaqrTdiYclqva733VFp8on3YART+6 yfTruDDREgpX90w/+k6XyamAd6MwdR6tNln+j9xXzAyjvv3sbqN2k0Oltp1tk4Mx8VXK FckQ== X-Gm-Message-State: AHQUAubznYqSyRoZuO7kWgswluqbYU7uml7k8Du6eV9cYqWyiPT4p/O4 /4MtYD9S/+x0ctpI4zqZPKN4VtTaBmlbzE1vMAUv X-Google-Smtp-Source: AHgI3IaHO0iAVCrCLitFJ+Mt0v4Frblbu3fm1miPdhBeFL4cgYgEd2Ytz37yGjWDdBAEdE6kQNdX5UmRujc3Rh8Ce1A= X-Received: by 2002:a2e:9d17:: with SMTP id t23-v6mr19395612lji.57.1550646065640; Tue, 19 Feb 2019 23:01:05 -0800 (PST) MIME-Version: 1.0 References: <155024683432.21651.14153938339749694146.stgit@warthog.procyon.org.uk> <8736ojybw7.fsf@xmission.com> <22055.1550619729@warthog.procyon.org.uk> In-Reply-To: <22055.1550619729@warthog.procyon.org.uk> From: Paul Moore Date: Wed, 20 Feb 2019 02:00:54 -0500 Message-ID: Subject: Re: [RFC PATCH 00/27] Containers and using authenticated filesystems To: David Howells Cc: "Eric W. Biederman" , keyrings@vger.kernel.org, trond.myklebust@hammerspace.com, sfrench@samba.org, linux-security-module@vger.kernel.org, linux-nfs@vger.kernel.org, linux-cifs@vger.kernel.org, linux-fsdevel@vger.kernel.org, rgb@redhat.com, linux-kernel@vger.kernel.org, Linux Containers , linux-api@vger.kernel.org Content-Type: text/plain; charset="UTF-8" Sender: linux-fsdevel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-fsdevel@vger.kernel.org On Tue, Feb 19, 2019 at 6:42 PM David Howells wrote: > Eric W. Biederman wrote: ... > > Looking at your description you are introducing a container id. > > Yes. For audit logging, which was why I cc'd Richard. Not to pile on, but it is more important to CC the audit mailing list. You can obviously still CC Richard, but you should send it to the entire mailing list. -- paul moore www.paul-moore.com