On Wed, May 01, 2013 at 02:30:46PM -0700, John Johansen wrote: > previously profiles had to be loaded one at a time, which could result > in cases where a replacement would partially succeed, and then fail > resulting in inconsitent policy. > > Allow multiple profiles to replaced atomically so that the replacement > either succeeeds or fails atomically for the set of profiles. > > Note: this does not provide multiple load of profiles when adding a parent > and its children as an atomic profile set. Because of this limitation > the atomic set load of profiles should not be exposed to userspace at this > time. > > Signed-off-by: John Johansen <john.johan...@canonical.com>
I'm having trouble reviewing this one, it all looks too familiar -- it all looks like 'normal', now. The only thing I spotted is that the description isn't true now, since you did get child profiles in the atomic load. Thanks
signature.asc
Description: Digital signature
-- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor