> Date: Mon, 07 Jul 2014 15:06:47 -0400 > From: Ted Unangst <t...@tedunangst.com> > > On Mon, Jul 07, 2014 at 11:18, Matthew Dempsky wrote: > > Recently guenther changed user credentials to be a per-process > > resource, but kept a per-thread cache of credentials that get > > refreshed at each system call entry. All of the get*[ug]id() system > > calls simply access the thread cached credentials, and possibly > > copyout() them if necessary, so they're safe to mark as NOLOCK. > > Is copyout safe to call with no lock?
yes