[apparmor] [PATCH 5/5] Function to test if apparmor support isenabled.

Kees Cook kees.cook at canonical.com
Sat Jul 23 17:47:00 UTC 2011


On Fri, Jul 22, 2011 at 02:05:34PM -0700, John Johansen wrote:
> yeah uncached is better or flipping the naming and have a _cached
> fn.  I debated about providing a cached version of the function
> because it is easy for applications to just cache the value themselves.
> I am on the fence on whether we need the cached version at all

Seems like it's not hugely expensive, and the non-cached version
avoids goofy races, etc, so yeah, probably better to just ditch
the cached one.

-- 
Kees Cook
Ubuntu Security Team



More information about the AppArmor mailing list