On Mon, 18 Oct 2004, Stephen Smalley wrote: > a) Add a flag to avc_audit(), optionally passed via avc_audit_data, that > tells it to use audit_log_end_irq() so that it merely enqueues the audit > message for later processing, and change capable and setscheduler hooks > to pass this flag, or > b) Move the security checks in setscheduler outside of the runqueue > lock, then just recheck that no security-relevant conditions changed > after taking the lock. A seems simpler, but perhaps better to do via a wrapper function. - James -- James Morris <jmorris@private>
This archive was generated by hypermail 2.1.3 : Mon Oct 18 2004 - 08:03:35 PDT