-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Vivek Goyal wrote:
That's what I said. It would be necessary to get the old state and
reset it if necessary.
As for the interface: I hope nobody honestly thinks that it is doable to
perform a whole bunch of filesystem operations for every exec.
And more: reading a rule file, interpreting the rules to find the best
match, etc is also too expensive. Every process would have to read the
rule file again. If this is non-trivial or the rule file is large, the
cost of an exec could easily be overshadowed by the cost of this
preparation. Unlike the kernel, the userlevel runtime cannot in general
amortize the cost over several exec calls. Handling all this in the
kernel wouldn't have any of these problems.
- --
➧ Ulrich Drepper ➧ Red Hat, Inc. ➧ 444 Castro St ➧ Mountain View, CA ❖
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkh2jVMACgkQ2ijCOnn/RHQ6JACgx4W0dUh/MK6po23D1ObcnsKA
HOAAn2Qfrh8m5zsdHQoniaoLl12Ut3ZE
=IU/X
-----END PGP SIGNATURE-----
--
