[apparmor] [PATCH 3/3] AppArmor: export known rlimit names/value mappings in securityfs

Kees Cook kees at ubuntu.com
Sat Dec 31 19:51:46 UTC 2011


On Sat, Dec 31, 2011 at 09:37:03AM +0000, Seth Arnold wrote:
> I realize it's nitpicking of the annoyingest degree, but how much time does this initialization loop add to boot time? rlimits are added almost never but there must be thousands of machines rebooting daily. How feasible would it be to construct the entire table via the cmd_make-rlim script?

This was bothering me too. Let me see what I can do.

> All three patches _look_ good but not tested.

Thanks!

-Kees

-- 
Kees Cook



More information about the AppArmor mailing list