RE: Security level 50

Rob Berendt wrote on 12/15/2005 12:57:18 PM:

> Keep in mind, Ed said "opening" the file thousands of times a minute.
Not
> reading.  It's not going to check on a read.

Actually that is not completely correct.  Parameter validation is done for
some reads. Because of buffering not every read done by your program
actually turns into a call of a user domain and system state program.  I
used open in my example because open does more work than most places at
security level 50. This work is done so that operations like read and write
do not have to do as much parameter validation. Also, if an application is
opening a file a thousand times a minute we can assume that it is also
closing a file at the same rate.

Ed Fishel,
edfishel@xxxxxxxxxx