Re: [apparmor] [PATCH 01/24] apparmor: provide base for multiple profiles to be replaced at once

2013-02-28 Thread Seth Arnold
On Wed, Feb 27, 2013 at 10:14:00AM -0800, John Johansen wrote: * aa_replace_profiles - replace profile(s) on the profile list * @udata: serialized data stream (NOT NULL) * @size: size of the serialized data stream ... */ ssize_t aa_replace_profiles(void *udata, size_t size, bool

[apparmor] [PATCH 01/24] apparmor: provide base for multiple profiles to be replaced at once

2013-02-27 Thread John Johansen
previously profiles had to be loaded one at a time, which could result in cases where a replacement would partially succeed, and then fail resulting in inconsitent policy. Allow multiple profiles to replaced atomically so that the replacement either succeeeds or fails atomically for the set of