Re: [patch] file capabilities: Add no_file_caps switch

[David Howells <dhowells@redhat.com>]

Alan Cox <alan@lxorguk.ukuu.org.uk> wrote:

> That gets foul in another way - bounding the worst case RCU
> memory utilisation if someone is sitting doing things like while(1)
> change_credentials();

Is it worth calling synchronize_rcu() in commit_creds() to make sure that the
old memory will have been freed if possible?  Admittedly that'll slow setuid()
and co. down, but it should avoid that problem.

David