SELinux policy and performance impacts

[Matt Anderson <mra@hp.com>]

I'm currently looking into the performance impact of SELinux.  Most of 
what I have seen so far involve testing the system's performance with 
file creation, open, and exec, but I was hoping to gather some more data 
before finalizing any conclusions.

I was wondering if anyone knows of any types of policy rules that when 
loaded into the kernel are particularly detrimental to system 
performance.  My understanding is that all policy rules are treated 
equally once they've been compiled to binary, but I wanted to ask here 
first in order to confirm that.

Thanks
-matt

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.