Robert Watson 763bbd2f4f Slightly change the semantics of vnode labels for MAC: rather than ... "refreshing" the label on the vnode before use, just get the label right from inception. For single-label file systems, set the label in the generic VFS getnewvnode() code; for multi-label file systems, leave the labeling up to the file system. With UFS1/2, this means reading the extended attribute during vfs_vget() as the inode is pulled off disk, rather than hitting the extended attributes frequently during operations later, improving performance. This also corrects sematics for shared vnode locks, which were not previously present in the system. This chances the cache coherrency properties WRT out-of-band access to label data, but in an acceptable form. With UFS1, there is a small race condition during automatic extended attribute start -- this is not present with UFS2, and occurs because EAs aren't available at vnode inception. We'll introduce a work around for this shortly. Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories		2002-10-26 14:38:24 +00:00
..
ffs	Slightly change the semantics of vnode labels for MAC: rather than	2002-10-26 14:38:24 +00:00
ufs	Slightly change the semantics of vnode labels for MAC: rather than	2002-10-26 14:38:24 +00:00