[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <28942.1200610127@redhat.com>
Date: Thu, 17 Jan 2008 22:48:47 +0000
From: David Howells <dhowells@...hat.com>
To: "J. Bruce Fields" <bfields@...ldses.org>
Cc: dhowells@...hat.com, sds@...ho.nsa.gov, casey@...aufler-ca.com,
Trond.Myklebust@...app.com, neilb@...e.de,
linux-kernel@...r.kernel.org, selinux@...ho.nsa.gov,
linux-security-module@...r.kernel.org, nfs@...ts.sourceforge.net
Subject: Re: [PATCH 06b/26] Security: Make NFSD work with detached security
J. Bruce Fields <bfields@...ldses.org> wrote:
> Just curious--why? Are get_kernel_security(), etc., particularly
> expensive?
It involves a kmalloc(). That means an extra possibility for an error. Plus
it may allow you to cache the result of checking whether, say, SELinux
security labels are allowed to be set when passed over NFS (if such is
possible).
David
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists