Posted Nov 18, 2010 16:36 UTC (Thu) by hmh (subscriber, #3838)
[Link]
It always did belong to kernel space when it made sense to do so.
The correct way to go about it is: policy belongs where it can be *realistically* made to work best by default.
Every interface that requires a kernel->userspace->kernel roundtrip to set policy _for no other reason_ than the "policy belongs in userspace" mentality, is clearly the product of bad engineering.
Policy belongs to kernel space
Posted Nov 18, 2010 18:27 UTC (Thu) by vonbrand (subscriber, #4458)
[Link]
The "policy is userspace" mentality is exactly one of the things that make Unixy systems flexible (and got Linux running from smartphones to Google). If it truly is setting policy, a roundtrip through the kernel won't be expensive enough to make any difference anyway.