From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <53D2A36E.8090900@redhat.com> Date: Fri, 25 Jul 2014 14:35:26 -0400 From: Daniel J Walsh MIME-Version: 1.0 To: Stephen Smalley , SELinux-NSA , Joshua Brindle , Steve Lawrence Subject: Re: [RFC] [PATCH] libsemanage: Skip policy module re-link when only setting booleans. References: <53D28DBB.8000905@tycho.nsa.gov> In-Reply-To: <53D28DBB.8000905@tycho.nsa.gov> Content-Type: multipart/alternative; boundary="------------030002070405000009010308" List-Id: "Security-Enhanced Linux \(SELinux\) mailing list" List-Post: List-Help: This is a multi-part message in MIME format. --------------030002070405000009010308 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Nice. On 07/25/2014 01:02 PM, Stephen Smalley wrote: > Motivated by: > https://bugzilla.redhat.com/show_bug.cgi?id=1098446 > > I believe this is always safe for booleans because we only set their > value; we are never adding new ones via semanage, unlike for example > users, ports, nodes, and interfaces. For the rest, I was wondering why > we don't save the linked file and just reuse it on those changes rather > than re-linking each time - that seems like it would be straightforward > to do in libsemanage and make those operations significantly faster and > less memory intensive. > > > _______________________________________________ > Selinux mailing list > Selinux@tycho.nsa.gov > To unsubscribe, send email to Selinux-leave@tycho.nsa.gov. > To get help, send an email containing "help" to Selinux-request@tycho.nsa.gov. --------------030002070405000009010308 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Nice.

On 07/25/2014 01:02 PM, Stephen Smalley wrote:

Motivated by:
https://bugzilla.redhat.com/show_bug.cgi?id=1098446

I believe this is always safe for booleans because we only set their
value; we are never adding new ones via semanage, unlike for example
users, ports, nodes, and interfaces.  For the rest, I was wondering why
we don't save the linked file and just reuse it on those changes rather
than re-linking each time - that seems like it would be straightforward
to do in libsemanage and make those operations significantly faster and
less memory intensive.

_______________________________________________
Selinux mailing list
Selinux@tycho.nsa.gov
To unsubscribe, send email to Selinux-leave@tycho.nsa.gov.
To get help, send an email containing "help" to Selinux-request@tycho.nsa.gov.

--------------030002070405000009010308--