[OpenAFS-devel] keyring/pag support for linux

Jim Rees rees@umich.edu
Wed, 19 Jul 2006 09:56:52 -0400


I'm not arguing against making a coherent plan for setpag().  The linux
kernel is moving in the direction of disallowing any added system calls,
like setpag, or modified ones, like setgroups.  Given this, it appears to me
that we need to replace setpag with keyrings, and stop using the setpag
system call.  Chas has contributed some code that will help us do this, but
has only gotten criticism in return.

I would not have a problem with seeing this code or something like it in the
cvs head.  It is clearly not a complete solution and I would not want it to
move into 1.5 or 1.4 until we do have a coherent plan.  But we've been
talking about this for years with little or no forward movement.  If some
code appeared in cvs, at least we would have a starting point, and could
talk about transition plans and compatibility issues.

If we do nothing, there will be no pags in the linux client.  Is that what
we want?