Re: SELinux performance depending on type count

[Ole Kliemann <ole@plastictree.net>]

[-- Attachment #1.1: Type: text/plain, Size: 3159 bytes --]

On Fri, Aug 10, 2012 at 09:00:15AM -0400, Stephen Smalley wrote:
> On Fri, 2012-08-10 at 14:11 +0200, Ole Kliemann wrote:
> > I did some runtime test now. I have about 2000 types, 1000 of 
> > them (named xIcJ_t, for 0 <= I <= 9, 0 <= J <= 99) each with his 
> > own role (xIcJ_r) associated to a user_u. Then there is a user_r 
> > and user_t for login. Additionally there is 
> > system_u:system_r:root_t with full access to everything.
> > 
> > I run the attached script. It creates directories for each of the 
> > 1000 types, puts something in it, does a find/grep etc.
> > 
> > As system_u:system_r:root_t the script measures an average of 
> > about 6sec walltime over 5 runs. (With very little variance.)
> > 
> > When I change context to user_u:user_r:user_t even things like 
> > 'ls' on home dir or 'id' lag consideribly the first time 
> > executed. Just being in this context makes things slow. The 
> > script measures an average of about 15sec walltime over 5 runs. 
> > 
> > That's 2.5 times as much. Who thinks 7% is ridiculously high now? 
> > ;-)
> > 
> > While it's running the whole system sometimes lags even for just 
> > writing on the terminal. top shows spikes of 50%+ CPU on kworker 
> > threads.
> > 
> > 
> > Good side is: It's a clear result and kind of settles the 
> > question. If you want a lot of different types for one user, go 
> > for categories.
> > 
> > 
> > But I don't understand this result. Why isn't it slow when root 
> > runs the script? He does the same relabeling to all those types. 
> > It's not like user_u:user_r:user_t would be running in different 
> > type concurrently. Just the fact that user_u is associated with 
> > all those types seems to make it slow to run in any context 
> > user_u:*
> 
> Your result doesn't sound right.  Wondering whether you are triggering
> masses of AVC denials (which could then peg syslog or audit) when
> running your script?

Checked that of course. dmesg showed nothing or just occasional 
denials. Just tryed again giving user_t full access to 
everything. Changes nothing and dmesg is clear. 

Anyway turns out above I forgot to mention something that 
actually is the core of the problem:

I build a minimal example which is attached. Of course you have 
at modify it to your policy. 

Basicly there is one role choke_r with one type choke_t und a 
user choke_u with role choke_r. Then are 1000 other types in the 
choke role each with a corresponding attribute.

This alone isn't a problem. But if each of these attributes get 
attributed to choke_t, the slowdown starts. Not as bad as 
mentioned above but still significantly. (10sec in the test 
above.)

So we have choke_u:choke_r:choke_t. Although all other types are 
in choke_r, that alone causes nothing. But as soon as there are
these 1000 attributes on choke_t the fun starts. Actually you 
don't even need the 1000 types. Just 1000 attributes on one type 
produces a measurable slowdown (7sec) and lags. Having 1000 types 
beside just makes it a lot worse. But there absolutely no 
slowdown with just 1000 types and no attributes.

[-- Attachment #1.2: choke.m4 --]
[-- Type: text/plain, Size: 172 bytes --]

define(`mk_choke',`
	type choke$1x$2_t, any_type;

	role choke_r types { choke$1x$2_t };

	attribute dominates_choke$1x$2;

	typeattribute choke_t dominates_choke$1x$2;
')

[-- Attachment #1.3: choke.te --]
[-- Type: text/plain, Size: 16277 bytes --]

module choke 1.0.0;

require {
	all_kernel_class_perms
	all_userspace_class_perms
	attribute any_type;
	attribute domain_type;
};

type choke_t, any_type;

allow choke_t any_type:all_class_set *;

role choke_r;
role choke_r types { choke_t };

mk_choke(0, 00)
mk_choke(0, 01)
mk_choke(0, 02)
mk_choke(0, 03)
mk_choke(0, 04)
mk_choke(0, 05)
mk_choke(0, 06)
mk_choke(0, 07)
mk_choke(0, 08)
mk_choke(0, 09)
mk_choke(0, 10)
mk_choke(0, 11)
mk_choke(0, 12)
mk_choke(0, 13)
mk_choke(0, 14)
mk_choke(0, 15)
mk_choke(0, 16)
mk_choke(0, 17)
mk_choke(0, 18)
mk_choke(0, 19)
mk_choke(0, 20)
mk_choke(0, 21)
mk_choke(0, 22)
mk_choke(0, 23)
mk_choke(0, 24)
mk_choke(0, 25)
mk_choke(0, 26)
mk_choke(0, 27)
mk_choke(0, 28)
mk_choke(0, 29)
mk_choke(0, 30)
mk_choke(0, 31)
mk_choke(0, 32)
mk_choke(0, 33)
mk_choke(0, 34)
mk_choke(0, 35)
mk_choke(0, 36)
mk_choke(0, 37)
mk_choke(0, 38)
mk_choke(0, 39)
mk_choke(0, 40)
mk_choke(0, 41)
mk_choke(0, 42)
mk_choke(0, 43)
mk_choke(0, 44)
mk_choke(0, 45)
mk_choke(0, 46)
mk_choke(0, 47)
mk_choke(0, 48)
mk_choke(0, 49)
mk_choke(0, 50)
mk_choke(0, 51)
mk_choke(0, 52)
mk_choke(0, 53)
mk_choke(0, 54)
mk_choke(0, 55)
mk_choke(0, 56)
mk_choke(0, 57)
mk_choke(0, 58)
mk_choke(0, 59)
mk_choke(0, 60)
mk_choke(0, 61)
mk_choke(0, 62)
mk_choke(0, 63)
mk_choke(0, 64)
mk_choke(0, 65)
mk_choke(0, 66)
mk_choke(0, 67)
mk_choke(0, 68)
mk_choke(0, 69)
mk_choke(0, 70)
mk_choke(0, 71)
mk_choke(0, 72)
mk_choke(0, 73)
mk_choke(0, 74)
mk_choke(0, 75)
mk_choke(0, 76)
mk_choke(0, 77)
mk_choke(0, 78)
mk_choke(0, 79)
mk_choke(0, 80)
mk_choke(0, 81)
mk_choke(0, 82)
mk_choke(0, 83)
mk_choke(0, 84)
mk_choke(0, 85)
mk_choke(0, 86)
mk_choke(0, 87)
mk_choke(0, 88)
mk_choke(0, 89)
mk_choke(0, 90)
mk_choke(0, 91)
mk_choke(0, 92)
mk_choke(0, 93)
mk_choke(0, 94)
mk_choke(0, 95)
mk_choke(0, 96)
mk_choke(0, 97)
mk_choke(0, 98)
mk_choke(0, 99)
mk_choke(1, 00)
mk_choke(1, 01)
mk_choke(1, 02)
mk_choke(1, 03)
mk_choke(1, 04)
mk_choke(1, 05)
mk_choke(1, 06)
mk_choke(1, 07)
mk_choke(1, 08)
mk_choke(1, 09)
mk_choke(1, 10)
mk_choke(1, 11)
mk_choke(1, 12)
mk_choke(1, 13)
mk_choke(1, 14)
mk_choke(1, 15)
mk_choke(1, 16)
mk_choke(1, 17)
mk_choke(1, 18)
mk_choke(1, 19)
mk_choke(1, 20)
mk_choke(1, 21)
mk_choke(1, 22)
mk_choke(1, 23)
mk_choke(1, 24)
mk_choke(1, 25)
mk_choke(1, 26)
mk_choke(1, 27)
mk_choke(1, 28)
mk_choke(1, 29)
mk_choke(1, 30)
mk_choke(1, 31)
mk_choke(1, 32)
mk_choke(1, 33)
mk_choke(1, 34)
mk_choke(1, 35)
mk_choke(1, 36)
mk_choke(1, 37)
mk_choke(1, 38)
mk_choke(1, 39)
mk_choke(1, 40)
mk_choke(1, 41)
mk_choke(1, 42)
mk_choke(1, 43)
mk_choke(1, 44)
mk_choke(1, 45)
mk_choke(1, 46)
mk_choke(1, 47)
mk_choke(1, 48)
mk_choke(1, 49)
mk_choke(1, 50)
mk_choke(1, 51)
mk_choke(1, 52)
mk_choke(1, 53)
mk_choke(1, 54)
mk_choke(1, 55)
mk_choke(1, 56)
mk_choke(1, 57)
mk_choke(1, 58)
mk_choke(1, 59)
mk_choke(1, 60)
mk_choke(1, 61)
mk_choke(1, 62)
mk_choke(1, 63)
mk_choke(1, 64)
mk_choke(1, 65)
mk_choke(1, 66)
mk_choke(1, 67)
mk_choke(1, 68)
mk_choke(1, 69)
mk_choke(1, 70)
mk_choke(1, 71)
mk_choke(1, 72)
mk_choke(1, 73)
mk_choke(1, 74)
mk_choke(1, 75)
mk_choke(1, 76)
mk_choke(1, 77)
mk_choke(1, 78)
mk_choke(1, 79)
mk_choke(1, 80)
mk_choke(1, 81)
mk_choke(1, 82)
mk_choke(1, 83)
mk_choke(1, 84)
mk_choke(1, 85)
mk_choke(1, 86)
mk_choke(1, 87)
mk_choke(1, 88)
mk_choke(1, 89)
mk_choke(1, 90)
mk_choke(1, 91)
mk_choke(1, 92)
mk_choke(1, 93)
mk_choke(1, 94)
mk_choke(1, 95)
mk_choke(1, 96)
mk_choke(1, 97)
mk_choke(1, 98)
mk_choke(1, 99)
mk_choke(2, 00)
mk_choke(2, 01)
mk_choke(2, 02)
mk_choke(2, 03)
mk_choke(2, 04)
mk_choke(2, 05)
mk_choke(2, 06)
mk_choke(2, 07)
mk_choke(2, 08)
mk_choke(2, 09)
mk_choke(2, 10)
mk_choke(2, 11)
mk_choke(2, 12)
mk_choke(2, 13)
mk_choke(2, 14)
mk_choke(2, 15)
mk_choke(2, 16)
mk_choke(2, 17)
mk_choke(2, 18)
mk_choke(2, 19)
mk_choke(2, 20)
mk_choke(2, 21)
mk_choke(2, 22)
mk_choke(2, 23)
mk_choke(2, 24)
mk_choke(2, 25)
mk_choke(2, 26)
mk_choke(2, 27)
mk_choke(2, 28)
mk_choke(2, 29)
mk_choke(2, 30)
mk_choke(2, 31)
mk_choke(2, 32)
mk_choke(2, 33)
mk_choke(2, 34)
mk_choke(2, 35)
mk_choke(2, 36)
mk_choke(2, 37)
mk_choke(2, 38)
mk_choke(2, 39)
mk_choke(2, 40)
mk_choke(2, 41)
mk_choke(2, 42)
mk_choke(2, 43)
mk_choke(2, 44)
mk_choke(2, 45)
mk_choke(2, 46)
mk_choke(2, 47)
mk_choke(2, 48)
mk_choke(2, 49)
mk_choke(2, 50)
mk_choke(2, 51)
mk_choke(2, 52)
mk_choke(2, 53)
mk_choke(2, 54)
mk_choke(2, 55)
mk_choke(2, 56)
mk_choke(2, 57)
mk_choke(2, 58)
mk_choke(2, 59)
mk_choke(2, 60)
mk_choke(2, 61)
mk_choke(2, 62)
mk_choke(2, 63)
mk_choke(2, 64)
mk_choke(2, 65)
mk_choke(2, 66)
mk_choke(2, 67)
mk_choke(2, 68)
mk_choke(2, 69)
mk_choke(2, 70)
mk_choke(2, 71)
mk_choke(2, 72)
mk_choke(2, 73)
mk_choke(2, 74)
mk_choke(2, 75)
mk_choke(2, 76)
mk_choke(2, 77)
mk_choke(2, 78)
mk_choke(2, 79)
mk_choke(2, 80)
mk_choke(2, 81)
mk_choke(2, 82)
mk_choke(2, 83)
mk_choke(2, 84)
mk_choke(2, 85)
mk_choke(2, 86)
mk_choke(2, 87)
mk_choke(2, 88)
mk_choke(2, 89)
mk_choke(2, 90)
mk_choke(2, 91)
mk_choke(2, 92)
mk_choke(2, 93)
mk_choke(2, 94)
mk_choke(2, 95)
mk_choke(2, 96)
mk_choke(2, 97)
mk_choke(2, 98)
mk_choke(2, 99)
mk_choke(3, 00)
mk_choke(3, 01)
mk_choke(3, 02)
mk_choke(3, 03)
mk_choke(3, 04)
mk_choke(3, 05)
mk_choke(3, 06)
mk_choke(3, 07)
mk_choke(3, 08)
mk_choke(3, 09)
mk_choke(3, 10)
mk_choke(3, 11)
mk_choke(3, 12)
mk_choke(3, 13)
mk_choke(3, 14)
mk_choke(3, 15)
mk_choke(3, 16)
mk_choke(3, 17)
mk_choke(3, 18)
mk_choke(3, 19)
mk_choke(3, 20)
mk_choke(3, 21)
mk_choke(3, 22)
mk_choke(3, 23)
mk_choke(3, 24)
mk_choke(3, 25)
mk_choke(3, 26)
mk_choke(3, 27)
mk_choke(3, 28)
mk_choke(3, 29)
mk_choke(3, 30)
mk_choke(3, 31)
mk_choke(3, 32)
mk_choke(3, 33)
mk_choke(3, 34)
mk_choke(3, 35)
mk_choke(3, 36)
mk_choke(3, 37)
mk_choke(3, 38)
mk_choke(3, 39)
mk_choke(3, 40)
mk_choke(3, 41)
mk_choke(3, 42)
mk_choke(3, 43)
mk_choke(3, 44)
mk_choke(3, 45)
mk_choke(3, 46)
mk_choke(3, 47)
mk_choke(3, 48)
mk_choke(3, 49)
mk_choke(3, 50)
mk_choke(3, 51)
mk_choke(3, 52)
mk_choke(3, 53)
mk_choke(3, 54)
mk_choke(3, 55)
mk_choke(3, 56)
mk_choke(3, 57)
mk_choke(3, 58)
mk_choke(3, 59)
mk_choke(3, 60)
mk_choke(3, 61)
mk_choke(3, 62)
mk_choke(3, 63)
mk_choke(3, 64)
mk_choke(3, 65)
mk_choke(3, 66)
mk_choke(3, 67)
mk_choke(3, 68)
mk_choke(3, 69)
mk_choke(3, 70)
mk_choke(3, 71)
mk_choke(3, 72)
mk_choke(3, 73)
mk_choke(3, 74)
mk_choke(3, 75)
mk_choke(3, 76)
mk_choke(3, 77)
mk_choke(3, 78)
mk_choke(3, 79)
mk_choke(3, 80)
mk_choke(3, 81)
mk_choke(3, 82)
mk_choke(3, 83)
mk_choke(3, 84)
mk_choke(3, 85)
mk_choke(3, 86)
mk_choke(3, 87)
mk_choke(3, 88)
mk_choke(3, 89)
mk_choke(3, 90)
mk_choke(3, 91)
mk_choke(3, 92)
mk_choke(3, 93)
mk_choke(3, 94)
mk_choke(3, 95)
mk_choke(3, 96)
mk_choke(3, 97)
mk_choke(3, 98)
mk_choke(3, 99)
mk_choke(4, 00)
mk_choke(4, 01)
mk_choke(4, 02)
mk_choke(4, 03)
mk_choke(4, 04)
mk_choke(4, 05)
mk_choke(4, 06)
mk_choke(4, 07)
mk_choke(4, 08)
mk_choke(4, 09)
mk_choke(4, 10)
mk_choke(4, 11)
mk_choke(4, 12)
mk_choke(4, 13)
mk_choke(4, 14)
mk_choke(4, 15)
mk_choke(4, 16)
mk_choke(4, 17)
mk_choke(4, 18)
mk_choke(4, 19)
mk_choke(4, 20)
mk_choke(4, 21)
mk_choke(4, 22)
mk_choke(4, 23)
mk_choke(4, 24)
mk_choke(4, 25)
mk_choke(4, 26)
mk_choke(4, 27)
mk_choke(4, 28)
mk_choke(4, 29)
mk_choke(4, 30)
mk_choke(4, 31)
mk_choke(4, 32)
mk_choke(4, 33)
mk_choke(4, 34)
mk_choke(4, 35)
mk_choke(4, 36)
mk_choke(4, 37)
mk_choke(4, 38)
mk_choke(4, 39)
mk_choke(4, 40)
mk_choke(4, 41)
mk_choke(4, 42)
mk_choke(4, 43)
mk_choke(4, 44)
mk_choke(4, 45)
mk_choke(4, 46)
mk_choke(4, 47)
mk_choke(4, 48)
mk_choke(4, 49)
mk_choke(4, 50)
mk_choke(4, 51)
mk_choke(4, 52)
mk_choke(4, 53)
mk_choke(4, 54)
mk_choke(4, 55)
mk_choke(4, 56)
mk_choke(4, 57)
mk_choke(4, 58)
mk_choke(4, 59)
mk_choke(4, 60)
mk_choke(4, 61)
mk_choke(4, 62)
mk_choke(4, 63)
mk_choke(4, 64)
mk_choke(4, 65)
mk_choke(4, 66)
mk_choke(4, 67)
mk_choke(4, 68)
mk_choke(4, 69)
mk_choke(4, 70)
mk_choke(4, 71)
mk_choke(4, 72)
mk_choke(4, 73)
mk_choke(4, 74)
mk_choke(4, 75)
mk_choke(4, 76)
mk_choke(4, 77)
mk_choke(4, 78)
mk_choke(4, 79)
mk_choke(4, 80)
mk_choke(4, 81)
mk_choke(4, 82)
mk_choke(4, 83)
mk_choke(4, 84)
mk_choke(4, 85)
mk_choke(4, 86)
mk_choke(4, 87)
mk_choke(4, 88)
mk_choke(4, 89)
mk_choke(4, 90)
mk_choke(4, 91)
mk_choke(4, 92)
mk_choke(4, 93)
mk_choke(4, 94)
mk_choke(4, 95)
mk_choke(4, 96)
mk_choke(4, 97)
mk_choke(4, 98)
mk_choke(4, 99)
mk_choke(5, 00)
mk_choke(5, 01)
mk_choke(5, 02)
mk_choke(5, 03)
mk_choke(5, 04)
mk_choke(5, 05)
mk_choke(5, 06)
mk_choke(5, 07)
mk_choke(5, 08)
mk_choke(5, 09)
mk_choke(5, 10)
mk_choke(5, 11)
mk_choke(5, 12)
mk_choke(5, 13)
mk_choke(5, 14)
mk_choke(5, 15)
mk_choke(5, 16)
mk_choke(5, 17)
mk_choke(5, 18)
mk_choke(5, 19)
mk_choke(5, 20)
mk_choke(5, 21)
mk_choke(5, 22)
mk_choke(5, 23)
mk_choke(5, 24)
mk_choke(5, 25)
mk_choke(5, 26)
mk_choke(5, 27)
mk_choke(5, 28)
mk_choke(5, 29)
mk_choke(5, 30)
mk_choke(5, 31)
mk_choke(5, 32)
mk_choke(5, 33)
mk_choke(5, 34)
mk_choke(5, 35)
mk_choke(5, 36)
mk_choke(5, 37)
mk_choke(5, 38)
mk_choke(5, 39)
mk_choke(5, 40)
mk_choke(5, 41)
mk_choke(5, 42)
mk_choke(5, 43)
mk_choke(5, 44)
mk_choke(5, 45)
mk_choke(5, 46)
mk_choke(5, 47)
mk_choke(5, 48)
mk_choke(5, 49)
mk_choke(5, 50)
mk_choke(5, 51)
mk_choke(5, 52)
mk_choke(5, 53)
mk_choke(5, 54)
mk_choke(5, 55)
mk_choke(5, 56)
mk_choke(5, 57)
mk_choke(5, 58)
mk_choke(5, 59)
mk_choke(5, 60)
mk_choke(5, 61)
mk_choke(5, 62)
mk_choke(5, 63)
mk_choke(5, 64)
mk_choke(5, 65)
mk_choke(5, 66)
mk_choke(5, 67)
mk_choke(5, 68)
mk_choke(5, 69)
mk_choke(5, 70)
mk_choke(5, 71)
mk_choke(5, 72)
mk_choke(5, 73)
mk_choke(5, 74)
mk_choke(5, 75)
mk_choke(5, 76)
mk_choke(5, 77)
mk_choke(5, 78)
mk_choke(5, 79)
mk_choke(5, 80)
mk_choke(5, 81)
mk_choke(5, 82)
mk_choke(5, 83)
mk_choke(5, 84)
mk_choke(5, 85)
mk_choke(5, 86)
mk_choke(5, 87)
mk_choke(5, 88)
mk_choke(5, 89)
mk_choke(5, 90)
mk_choke(5, 91)
mk_choke(5, 92)
mk_choke(5, 93)
mk_choke(5, 94)
mk_choke(5, 95)
mk_choke(5, 96)
mk_choke(5, 97)
mk_choke(5, 98)
mk_choke(5, 99)
mk_choke(6, 00)
mk_choke(6, 01)
mk_choke(6, 02)
mk_choke(6, 03)
mk_choke(6, 04)
mk_choke(6, 05)
mk_choke(6, 06)
mk_choke(6, 07)
mk_choke(6, 08)
mk_choke(6, 09)
mk_choke(6, 10)
mk_choke(6, 11)
mk_choke(6, 12)
mk_choke(6, 13)
mk_choke(6, 14)
mk_choke(6, 15)
mk_choke(6, 16)
mk_choke(6, 17)
mk_choke(6, 18)
mk_choke(6, 19)
mk_choke(6, 20)
mk_choke(6, 21)
mk_choke(6, 22)
mk_choke(6, 23)
mk_choke(6, 24)
mk_choke(6, 25)
mk_choke(6, 26)
mk_choke(6, 27)
mk_choke(6, 28)
mk_choke(6, 29)
mk_choke(6, 30)
mk_choke(6, 31)
mk_choke(6, 32)
mk_choke(6, 33)
mk_choke(6, 34)
mk_choke(6, 35)
mk_choke(6, 36)
mk_choke(6, 37)
mk_choke(6, 38)
mk_choke(6, 39)
mk_choke(6, 40)
mk_choke(6, 41)
mk_choke(6, 42)
mk_choke(6, 43)
mk_choke(6, 44)
mk_choke(6, 45)
mk_choke(6, 46)
mk_choke(6, 47)
mk_choke(6, 48)
mk_choke(6, 49)
mk_choke(6, 50)
mk_choke(6, 51)
mk_choke(6, 52)
mk_choke(6, 53)
mk_choke(6, 54)
mk_choke(6, 55)
mk_choke(6, 56)
mk_choke(6, 57)
mk_choke(6, 58)
mk_choke(6, 59)
mk_choke(6, 60)
mk_choke(6, 61)
mk_choke(6, 62)
mk_choke(6, 63)
mk_choke(6, 64)
mk_choke(6, 65)
mk_choke(6, 66)
mk_choke(6, 67)
mk_choke(6, 68)
mk_choke(6, 69)
mk_choke(6, 70)
mk_choke(6, 71)
mk_choke(6, 72)
mk_choke(6, 73)
mk_choke(6, 74)
mk_choke(6, 75)
mk_choke(6, 76)
mk_choke(6, 77)
mk_choke(6, 78)
mk_choke(6, 79)
mk_choke(6, 80)
mk_choke(6, 81)
mk_choke(6, 82)
mk_choke(6, 83)
mk_choke(6, 84)
mk_choke(6, 85)
mk_choke(6, 86)
mk_choke(6, 87)
mk_choke(6, 88)
mk_choke(6, 89)
mk_choke(6, 90)
mk_choke(6, 91)
mk_choke(6, 92)
mk_choke(6, 93)
mk_choke(6, 94)
mk_choke(6, 95)
mk_choke(6, 96)
mk_choke(6, 97)
mk_choke(6, 98)
mk_choke(6, 99)
mk_choke(7, 00)
mk_choke(7, 01)
mk_choke(7, 02)
mk_choke(7, 03)
mk_choke(7, 04)
mk_choke(7, 05)
mk_choke(7, 06)
mk_choke(7, 07)
mk_choke(7, 08)
mk_choke(7, 09)
mk_choke(7, 10)
mk_choke(7, 11)
mk_choke(7, 12)
mk_choke(7, 13)
mk_choke(7, 14)
mk_choke(7, 15)
mk_choke(7, 16)
mk_choke(7, 17)
mk_choke(7, 18)
mk_choke(7, 19)
mk_choke(7, 20)
mk_choke(7, 21)
mk_choke(7, 22)
mk_choke(7, 23)
mk_choke(7, 24)
mk_choke(7, 25)
mk_choke(7, 26)
mk_choke(7, 27)
mk_choke(7, 28)
mk_choke(7, 29)
mk_choke(7, 30)
mk_choke(7, 31)
mk_choke(7, 32)
mk_choke(7, 33)
mk_choke(7, 34)
mk_choke(7, 35)
mk_choke(7, 36)
mk_choke(7, 37)
mk_choke(7, 38)
mk_choke(7, 39)
mk_choke(7, 40)
mk_choke(7, 41)
mk_choke(7, 42)
mk_choke(7, 43)
mk_choke(7, 44)
mk_choke(7, 45)
mk_choke(7, 46)
mk_choke(7, 47)
mk_choke(7, 48)
mk_choke(7, 49)
mk_choke(7, 50)
mk_choke(7, 51)
mk_choke(7, 52)
mk_choke(7, 53)
mk_choke(7, 54)
mk_choke(7, 55)
mk_choke(7, 56)
mk_choke(7, 57)
mk_choke(7, 58)
mk_choke(7, 59)
mk_choke(7, 60)
mk_choke(7, 61)
mk_choke(7, 62)
mk_choke(7, 63)
mk_choke(7, 64)
mk_choke(7, 65)
mk_choke(7, 66)
mk_choke(7, 67)
mk_choke(7, 68)
mk_choke(7, 69)
mk_choke(7, 70)
mk_choke(7, 71)
mk_choke(7, 72)
mk_choke(7, 73)
mk_choke(7, 74)
mk_choke(7, 75)
mk_choke(7, 76)
mk_choke(7, 77)
mk_choke(7, 78)
mk_choke(7, 79)
mk_choke(7, 80)
mk_choke(7, 81)
mk_choke(7, 82)
mk_choke(7, 83)
mk_choke(7, 84)
mk_choke(7, 85)
mk_choke(7, 86)
mk_choke(7, 87)
mk_choke(7, 88)
mk_choke(7, 89)
mk_choke(7, 90)
mk_choke(7, 91)
mk_choke(7, 92)
mk_choke(7, 93)
mk_choke(7, 94)
mk_choke(7, 95)
mk_choke(7, 96)
mk_choke(7, 97)
mk_choke(7, 98)
mk_choke(7, 99)
mk_choke(8, 00)
mk_choke(8, 01)
mk_choke(8, 02)
mk_choke(8, 03)
mk_choke(8, 04)
mk_choke(8, 05)
mk_choke(8, 06)
mk_choke(8, 07)
mk_choke(8, 08)
mk_choke(8, 09)
mk_choke(8, 10)
mk_choke(8, 11)
mk_choke(8, 12)
mk_choke(8, 13)
mk_choke(8, 14)
mk_choke(8, 15)
mk_choke(8, 16)
mk_choke(8, 17)
mk_choke(8, 18)
mk_choke(8, 19)
mk_choke(8, 20)
mk_choke(8, 21)
mk_choke(8, 22)
mk_choke(8, 23)
mk_choke(8, 24)
mk_choke(8, 25)
mk_choke(8, 26)
mk_choke(8, 27)
mk_choke(8, 28)
mk_choke(8, 29)
mk_choke(8, 30)
mk_choke(8, 31)
mk_choke(8, 32)
mk_choke(8, 33)
mk_choke(8, 34)
mk_choke(8, 35)
mk_choke(8, 36)
mk_choke(8, 37)
mk_choke(8, 38)
mk_choke(8, 39)
mk_choke(8, 40)
mk_choke(8, 41)
mk_choke(8, 42)
mk_choke(8, 43)
mk_choke(8, 44)
mk_choke(8, 45)
mk_choke(8, 46)
mk_choke(8, 47)
mk_choke(8, 48)
mk_choke(8, 49)
mk_choke(8, 50)
mk_choke(8, 51)
mk_choke(8, 52)
mk_choke(8, 53)
mk_choke(8, 54)
mk_choke(8, 55)
mk_choke(8, 56)
mk_choke(8, 57)
mk_choke(8, 58)
mk_choke(8, 59)
mk_choke(8, 60)
mk_choke(8, 61)
mk_choke(8, 62)
mk_choke(8, 63)
mk_choke(8, 64)
mk_choke(8, 65)
mk_choke(8, 66)
mk_choke(8, 67)
mk_choke(8, 68)
mk_choke(8, 69)
mk_choke(8, 70)
mk_choke(8, 71)
mk_choke(8, 72)
mk_choke(8, 73)
mk_choke(8, 74)
mk_choke(8, 75)
mk_choke(8, 76)
mk_choke(8, 77)
mk_choke(8, 78)
mk_choke(8, 79)
mk_choke(8, 80)
mk_choke(8, 81)
mk_choke(8, 82)
mk_choke(8, 83)
mk_choke(8, 84)
mk_choke(8, 85)
mk_choke(8, 86)
mk_choke(8, 87)
mk_choke(8, 88)
mk_choke(8, 89)
mk_choke(8, 90)
mk_choke(8, 91)
mk_choke(8, 92)
mk_choke(8, 93)
mk_choke(8, 94)
mk_choke(8, 95)
mk_choke(8, 96)
mk_choke(8, 97)
mk_choke(8, 98)
mk_choke(8, 99)
mk_choke(9, 00)
mk_choke(9, 01)
mk_choke(9, 02)
mk_choke(9, 03)
mk_choke(9, 04)
mk_choke(9, 05)
mk_choke(9, 06)
mk_choke(9, 07)
mk_choke(9, 08)
mk_choke(9, 09)
mk_choke(9, 10)
mk_choke(9, 11)
mk_choke(9, 12)
mk_choke(9, 13)
mk_choke(9, 14)
mk_choke(9, 15)
mk_choke(9, 16)
mk_choke(9, 17)
mk_choke(9, 18)
mk_choke(9, 19)
mk_choke(9, 20)
mk_choke(9, 21)
mk_choke(9, 22)
mk_choke(9, 23)
mk_choke(9, 24)
mk_choke(9, 25)
mk_choke(9, 26)
mk_choke(9, 27)
mk_choke(9, 28)
mk_choke(9, 29)
mk_choke(9, 30)
mk_choke(9, 31)
mk_choke(9, 32)
mk_choke(9, 33)
mk_choke(9, 34)
mk_choke(9, 35)
mk_choke(9, 36)
mk_choke(9, 37)
mk_choke(9, 38)
mk_choke(9, 39)
mk_choke(9, 40)
mk_choke(9, 41)
mk_choke(9, 42)
mk_choke(9, 43)
mk_choke(9, 44)
mk_choke(9, 45)
mk_choke(9, 46)
mk_choke(9, 47)
mk_choke(9, 48)
mk_choke(9, 49)
mk_choke(9, 50)
mk_choke(9, 51)
mk_choke(9, 52)
mk_choke(9, 53)
mk_choke(9, 54)
mk_choke(9, 55)
mk_choke(9, 56)
mk_choke(9, 57)
mk_choke(9, 58)
mk_choke(9, 59)
mk_choke(9, 60)
mk_choke(9, 61)
mk_choke(9, 62)
mk_choke(9, 63)
mk_choke(9, 64)
mk_choke(9, 65)
mk_choke(9, 66)
mk_choke(9, 67)
mk_choke(9, 68)
mk_choke(9, 69)
mk_choke(9, 70)
mk_choke(9, 71)
mk_choke(9, 72)
mk_choke(9, 73)
mk_choke(9, 74)
mk_choke(9, 75)
mk_choke(9, 76)
mk_choke(9, 77)
mk_choke(9, 78)
mk_choke(9, 79)
mk_choke(9, 80)
mk_choke(9, 81)
mk_choke(9, 82)
mk_choke(9, 83)
mk_choke(9, 84)
mk_choke(9, 85)
mk_choke(9, 86)
mk_choke(9, 87)
mk_choke(9, 88)
mk_choke(9, 89)
mk_choke(9, 90)
mk_choke(9, 91)
mk_choke(9, 92)
mk_choke(9, 93)
mk_choke(9, 94)
mk_choke(9, 95)
mk_choke(9, 96)
mk_choke(9, 97)
mk_choke(9, 98)
mk_choke(9, 99)

user choke_u roles { choke_r };

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 198 bytes --]