Update apparmor_kernel_development_guide

John Johansen 2018-09-29 06:40:46 +00:00
parent e9eda2154f
commit c65d748458

@ -86,6 +86,7 @@ Except in a few special cases NEVER directly use the cred's label. Doing so coul
Instead use
- task context: begin_label_crit_section/end_label_crit_section
- atomic context: __begin_label_crit_section/__end_label_crit_section
unless you are going to update the task's label. NEVER update the task's label inside of a label_crit_section. Instead
- get a reference count on the task's label
- update the tasks label via updating the cred