From mboxrd@z Thu Jan 1 00:00:00 1970 From: Dan Smith Subject: Re: [PATCH 3/3] Track socket buffer owners (v2) Date: Fri, 11 Sep 2009 07:31:59 -0700 Message-ID: <878wgllfhc.fsf@caffeine.danplanet.com> References: <1252508756-4278-1-git-send-email-danms@us.ibm.com> <1252508756-4278-4-git-send-email-danms@us.ibm.com> <20090911020206.GA15845@us.ibm.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20090911020206.GA15845-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org> (Serge E. Hallyn's message of "Thu\, 10 Sep 2009 21\:02\:06 -0500") List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: "Serge E. Hallyn" Cc: containers-qjLDD68F18O7TbgM5vRIOg@public.gmane.org List-Id: containers.vger.kernel.org SH> 'capable' actually has an adverse effect of setting the SH> PF_SUPERPRIV flag on current. So if I don't misread this, you'll SH> want to do the length check first, then the capable check, in SH> order to make sure that PF_SUPERPRIV doesn't get set unless the SH> privilege was actually needed. Ah, okay, thanks, I'll switch those. -- Dan Smith IBM Linux Technology Center email: danms-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org