Messages in this thread | | | From | David Laight <> | Subject | RE: [PATCH v5 0/3] implement OA2_CRED_INHERIT flag for openat2() | Date | Mon, 6 May 2024 19:34:24 +0000 |
| |
... > So I want a way to give *an entire container* access to a directory. > Classic UNIX DAC is just *wrong* for this use case. Maybe idmaps > could learn a way to squash multiple ids down to one. Or maybe > something like my silly credential-capturing mount proposal could > work. But the status quo is not actually amazing IMO.
Isn't that what gids are for :-)
David
- Registered Address Lakeside, Bramley Road, Mount Farm, Milton Keynes, MK1 1PT, UK Registration No: 1397386 (Wales)
| |