From: Ole Kliemann <ole@plastictree.net>
To: Stephen Smalley <sds@tycho.nsa.gov>
Cc: selinux@tycho.nsa.gov, Eric Paris <eparis@redhat.com>
Subject: Re: SELinux performance depending on type count
Date: Mon, 27 Aug 2012 17:28:43 +0200 [thread overview]
Message-ID: <20120827152843.GD2168@telvanni> (raw)
In-Reply-To: <1344861329.25589.16.camel@moss-pluto.epoch.ncsc.mil>
[-- Attachment #1.1: Type: text/plain, Size: 757 bytes --]
On Mon, Aug 13, 2012 at 08:35:29AM -0400, Stephen Smalley wrote:
> On Fri, 2012-08-10 at 23:38 +0200, Ole Kliemann wrote:
> > [...]
> >
> > $ runcon -l s0:c0.c9999
> >
> > Now I'm system_u:system_r:unconfined_t:s0:c0.c9999.
> > I rerun the script. Average walltime is about 39sec.
> >
> > Ouch! :-/
> >
> > [...]
>
> I wonder how much of that time is spent on the chcon calls (i.e.
> getxattr + setxattr) vs the actual accessing of the files.
I was away for some time, but in case you are still interested:
As can be seen with the attached script, the time it takes
accessing the files remains stable. Only creating and chcon'ing
files and dirs seems to be the problem.
So for all of my purposes I consider this a non-issue.
[-- Attachment #1.2: x.sh --]
[-- Type: application/x-sh, Size: 982 bytes --]
[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 198 bytes --]
next prev parent reply other threads:[~2012-08-27 15:29 UTC|newest]
Thread overview: 27+ messages / expand[flat|nested] mbox.gz Atom feed top
2012-08-07 13:02 SELinux performance depending on type count Ole Kliemann
2012-08-07 14:12 ` David Quigley
2012-08-07 17:07 ` William Roberts
2012-08-07 17:36 ` Daniel J Walsh
2012-08-08 20:44 ` Ole Kliemann
2012-08-09 10:45 ` Adam Tkac
2012-08-09 11:56 ` Ole Kliemann
2012-08-10 12:11 ` Ole Kliemann
2012-08-10 13:00 ` Stephen Smalley
2012-08-10 14:36 ` Ole Kliemann
2012-08-10 15:05 ` Stephen Smalley
2012-08-10 15:43 ` Ole Kliemann
2012-08-10 15:44 ` Ole Kliemann
2012-08-10 16:08 ` Stephen Smalley
2012-08-10 16:18 ` Stephen Smalley
2012-08-10 17:00 ` Ole Kliemann
2012-08-10 18:08 ` Stephen Smalley
2012-08-10 18:46 ` Ole Kliemann
2012-08-10 18:55 ` Stephen Smalley
2012-08-10 19:11 ` Ole Kliemann
2012-08-10 19:19 ` Stephen Smalley
2012-08-10 19:26 ` Ole Kliemann
2012-08-10 19:50 ` Stephen Smalley
2012-08-10 21:38 ` Ole Kliemann
2012-08-13 12:35 ` Stephen Smalley
2012-08-27 15:28 ` Ole Kliemann [this message]
2012-08-27 16:24 ` Stephen Smalley
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20120827152843.GD2168@telvanni \
--to=ole@plastictree.net \
--cc=eparis@redhat.com \
--cc=sds@tycho.nsa.gov \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.