spinlocks, userspace?

Hi Dazuko developers,

I saw your project mentioned on lkml [1] and decided to look into it. Now, I
sort of had the same idea two weeks ago, seems you are way ahead of me,
which is very good.

However, in thinking up my own dazuko, I was told that some LSM hooks are
under spinlock, which make it impossible to call down to userspace to get 
its opinion on allowing access or not.

This would not be a problem on uniprocessor builds though. Did you solve
this problem? Or are my friends wrong about the spinlocks?

Also, for performance reasons I was considering a kernel-side cache of
decisions, which could be invalidated from userspace. This is only useful if
there are only static rules of course.

Thanks for your time and answers. I hope to work with dazuko to implement
some of my ideas.

[1]
http://groups-beta.google.com/group/fa.linux.kernel/browse_thread/thread/8dc8004b59580b26/832cbfba4c3c7c8b?q=dazuko+linux-kernel&_done=%2Fgroups%3Fq%3Ddazuko+linux-kernel%26start%3D0%26scoring%3Dd%26hl%3Den%26&_doneTitle=Back+to+Search&&d#832cbfba4c3c7c8b

-- 
http://www.PowerDNS.com      Open source, database driven DNS Software 
http://lartc.org           Linux Advanced Routing & Traffic Control HOWTO