[cap-talk] Delegating directories in Linux: D-GateFS project proposal

[Rob J Meijer]

After trying with the LSM mailinglist crowd to see what the possibilities
would be for reduced ambient authority and the 'at' syscall family as
hooks,
I have (for the short-term) given up on LSM (maybe someone else on this
list could try to advocate ambient authority related hooks to the LSM
crowd?).

I am now putting my short term energy in user space filesystems.

I've tried to put down a specification on how a delegation filesystem
should work (under Linux using fuse). I would be very interested to
learn what others think about this setup:

      http://www.xs4all.nl/~rmeijer/dgatefs.pdf

T.I.A.

Rob J Meijer