[OpenAFS-devel] Updated redhat workaround patch

[Derrick J Brashear]

On 22 Oct 2002, Derek Atkins wrote:

> > Derrick tried to submit a patch that implimented "safe" syscall
> > registration modeled on nfsservctl, and got nothing but pushback about
> > how dispatching interfaces suck, and that instead afs should use an
> > "open/read/write/close" method. This wasn't from redhat, but it's an
> > indication of how the linux-kernel community views the openafs
> > implementation.
> 
> How is AFS supposed to use an open/read/write/close method to hook
> into, e.g., initgroups()?

Not their problem. Again, assuming LSM survives, the "PAG" linux security
module, which maintains something that gets stuck in the last in the task
security struct, would be the way to go here.