From e2f05dc6098b070dd8bfaca29f958ec7e43ce37b Mon Sep 17 00:00:00 2001 From: John Johansen Date: Tue, 4 Dec 2018 05:00:56 +0000 Subject: [PATCH] Update apparmor_kernel_development_guide_notifications --- apparmor_kernel_development_guide_notifications.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/apparmor_kernel_development_guide_notifications.md b/apparmor_kernel_development_guide_notifications.md index b587ccd..9edf764 100644 --- a/apparmor_kernel_development_guide_notifications.md +++ b/apparmor_kernel_development_guide_notifications.md @@ -95,6 +95,13 @@ down grading prompt ## ??? audit structs +# type cache + +To avoid repeating prompt messages to userspace. Answers are pushed into the type cache. However because we don't have a true type for the prompt we use a hash of the prompt parameters. That is unique and guaranteed not to overlap actual types in the cache. + +Because the cache ages and sees replacement as new permissions are cached it is possible userspace will see the same prompt again if the profile doing the query is not replaced. Just how long this will take on average will depend on the size of the type cache. + + ## user space api