patch update to ~51

Timothy R. Chavez tinytim at us.ibm.com
Thu Jun 2 15:54:58 UTC 2005


On Thursday 02 June 2005 10:27, Timothy R. Chavez wrote:
> The only thing we have to watch out for is reading the master watchlist and having an
> inode deleted from under us... but we should be able to protect against that with the
> global spinlock.

But even here.  If we're listing, we'll never be contending with a watchlist watch removal.
Why?  Because the audit_netlink_sem ensures that while we're listing, we cannot insert
nor remove watches from any watchlist.  So we might not even need this lock either.

-tim




More information about the Linux-audit mailing list