diff --git a/apparmor_kernel_development_guide.md b/apparmor_kernel_development_guide.md index 5c850b4..ce8d5ed 100644 --- a/apparmor_kernel_development_guide.md +++ b/apparmor_kernel_development_guide.md @@ -86,6 +86,7 @@ Except in a few special cases NEVER directly use the cred's label. Doing so coul Instead use - task context: begin_label_crit_section/end_label_crit_section - atomic context: __begin_label_crit_section/__end_label_crit_section + unless you are going to update the task's label. NEVER update the task's label inside of a label_crit_section. Instead - get a reference count on the task's label - update the tasks label via updating the cred