Re: Real simple cache that removes most of the lookups in mcstrans

[Daniel J Walsh <dwalsh@redhat.com>]

Joshua Brindle wrote:
> Daniel J Walsh wrote:
>> Basically check if the previous lookup was the same context, if yes 
>> return the same translation.   Otherwise do the lookup.
>>
>> Also included Russells patch for avcstat.
> Is this used on MLS? If so this cache needs to be cleared on policy 
> reload for proper revocation of translation access. Further, this has 
> no way of checking to see if the actual translations changed between 
> the last query and this one.
Yes, you mean translation change, I think.  Since I do not see where 
policy reload would effect this.  We could add some kind of timer to 
this, but refreshing the cache is a small problem, but this same problem 
existed with shared libraries.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.