From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751172AbWDTTt2 (ORCPT ); Thu, 20 Apr 2006 15:49:28 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751180AbWDTTt1 (ORCPT ); Thu, 20 Apr 2006 15:49:27 -0400 Received: from mx2.suse.de ([195.135.220.15]:58246 "EHLO mx2.suse.de") by vger.kernel.org with ESMTP id S1751172AbWDTTt0 (ORCPT ); Thu, 20 Apr 2006 15:49:26 -0400 Date: Thu, 20 Apr 2006 12:45:03 -0700 From: Tony Jones To: "Serge E. Hallyn" Cc: Stephen Smalley , linux-security-module@vger.kernel.org, chrisw@sous-sol.org, linux-kernel@vger.kernel.org Subject: Re: [RFC][PATCH 11/11] security: AppArmor - Export namespace semaphore Message-ID: <20060420194503.GA1425@suse.de> References: <20060419174905.29149.67649.sendpatchset@ermintrude.int.wirex.com> <20060419175034.29149.94306.sendpatchset@ermintrude.int.wirex.com> <1145536742.16456.35.camel@moss-spartans.epoch.ncsc.mil> <20060420124647.GD18604@sergelap.austin.ibm.com> <1145534735.3313.3.camel@moss-spartans.epoch.ncsc.mil> <20060420132128.GG18604@sergelap.austin.ibm.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20060420132128.GG18604@sergelap.austin.ibm.com> User-Agent: Mutt/1.5.9i Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Apr 20, 2006 at 08:21:28AM -0500, Serge E. Hallyn wrote: > Tony, do you have any performance measurements? Both for unconfined and > confined apps? Presumably unconfined processes should have 0 performance > hit, right? Hi Serge. We have lmbench results. We had issues getting reproducability out of dbench but need to look at it some more. The lmbench figures we presently have are from the old code (reader writer lock). Results were good but we recently converted to rcu for the reader dominated rw locks. I'm not sure there is "0 performance hit for unconfined" as you have to check for them being unconfined :) but it's low. If you have other benchmarks we are open to suggestions. What has been used to benchmark SELinux? Anyways, we need to regenerate the results, we'll try and post in the next couple days. ok? Thanks Tony