From: David Howells In-Reply-To: <20080117204804.GC6416@fieldses.org> References: <20080117204804.GC6416@fieldses.org> <20080115234724.22183.9603.stgit@warthog.procyon.org.uk> <20080115234652.22183.24850.stgit@warthog.procyon.org.uk> <20849.1200590240@redhat.com> To: "J. Bruce Fields" Cc: dhowells@redhat.com, sds@tycho.nsa.gov, casey@schaufler-ca.com, Trond.Myklebust@netapp.com, neilb@suse.de, linux-kernel@vger.kernel.org, selinux@tycho.nsa.gov, linux-security-module@vger.kernel.org, nfs@lists.sourceforge.net Subject: Re: [PATCH 06b/26] Security: Make NFSD work with detached security Date: Thu, 17 Jan 2008 22:48:47 +0000 Message-ID: <28942.1200610127@redhat.com> Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov J. Bruce Fields wrote: > Just curious--why? Are get_kernel_security(), etc., particularly > expensive? It involves a kmalloc(). That means an extra possibility for an error. Plus it may allow you to cache the result of checking whether, say, SELinux security labels are allowed to be set when passed over NFS (if such is possible). David -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.