2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 05:47:59 +00:00

Update apparmor_kernel_development_guide_notifications

John Johansen 2018-12-04 01:41:37 +00:00
parent 997ce99668
commit 38c9d998df

@ -43,7 +43,10 @@ If a notification is determined to be needed the audit message is queued up on t
## Audit messages and allocations
The queue of audit messages requires that they be allocated via heap memory, but we also don't want the regular audit path to fail. ???
The queue of audit messages requires that they be allocated via heap memory, but we also don't want the regular audit path to fail.
Atm the initial audit struct is allocated on the stack, if an audit message is to go to notifications, a new audit structure is allocated from a kmem_cache of audit message objects. This reduces the chance of failure, and allows per cpu caching of the audit struct.
It does however require that audit messages are NOT allocated from the stac