• Eric Paris's avatar
    capabilities: remove task_ns_* functions · f1c84dae
    Eric Paris authored
    task_ in the front of a function, in the security subsystem anyway, means
    to me at least, that we are operating with that task as the subject of the
    security decision.  In this case what it means is that we are using current as
    the subject but we use the task to get the right namespace.  Who in the world
    would ever realize that's what task_ns_capability means just by the name?  This
    patch eliminates the task_ns functions entirely and uses the has_ns_capability
    function instead.  This means we explicitly open code the ns in question in
    the caller.  I think it makes the caller a LOT more clear what is going on.
    Signed-off-by: default avatarEric Paris <eparis@redhat.com>
    Acked-by: default avatarSerge E. Hallyn <serge.hallyn@canonical.com>
    f1c84dae
ptrace.c 26.4 KB