On Mon, 18 Oct 2004, Stephen Smalley wrote:

> a) Add a flag to avc_audit(), optionally passed via avc_audit_data, that
> tells it to use audit_log_end_irq() so that it merely enqueues the audit
> message for later processing, and change capable and setscheduler hooks
> to pass this flag, or
> b) Move the security checks in setscheduler outside of the runqueue
> lock, then just recheck that no security-relevant conditions changed
> after taking the lock.

A seems simpler, but perhaps better to do via a wrapper function.

• James -- James Morris <jmorris@redhat.com>

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.