From: Stephen Smalley <stephen.smalley@gmail.com>
To: James Morris <jmorris@namei.org>
Cc: Vesa-Matti J Kari <vmkari@cc.helsinki.fi>,
Eric Paris <eparis@parisplace.org>,
Stephen Smalley <sds@tycho.nsa.gov>,
Paul Moore <paul.moore@hp.com>,
selinux@tycho.nsa.gov
Subject: Re: [patch] SELinux: trivial, unify iterator variable naming, part 3
Date: Fri, 25 Jul 2008 09:19:57 -0400 [thread overview]
Message-ID: <1216992009.11948.1.camel@sulphur> (raw)
In-Reply-To: <Xine.LNX.4.64.0807252302500.12139@us.intercode.com.au>
On Fri, 2008-07-25 at 23:03 +1000, James Morris wrote:
> Turns out it was caused by
> CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX_VALUE being set to the
> default of 19.
>
> After setting it to 22 (same as the Fedora kernel), the problem went away.
Makes sense - policy.19 predates the avtab memory optimization work I
did, and requires the policy toolchain to fully expand all
attribute-based rules into individual type pairs. So that shows how
much memory we are saving from that particular optimization today.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next prev parent reply other threads:[~2008-07-25 13:22 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-07-20 23:24 [patch] SELinux: trivial, unify iterator variable naming, part 3 Vesa-Matti J Kari
2008-07-24 13:28 ` James Morris
2008-07-24 16:00 ` Vesa-Matti J Kari
2008-07-25 1:20 ` Stephen Smalley
2008-07-25 13:03 ` James Morris
2008-07-25 13:19 ` Stephen Smalley [this message]
2008-07-25 14:47 ` James Morris
2008-07-26 0:45 ` Stephen Smalley
2008-07-26 14:23 ` Paul Moore
2008-07-28 18:13 ` Stephen Smalley
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1216992009.11948.1.camel@sulphur \
--to=stephen.smalley@gmail.com \
--cc=eparis@parisplace.org \
--cc=jmorris@namei.org \
--cc=paul.moore@hp.com \
--cc=sds@tycho.nsa.gov \
--cc=selinux@tycho.nsa.gov \
--cc=vmkari@cc.helsinki.fi \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.