Re: [PATCH] remove sys_security

David Wagner
2002-10-18T20:33:44Z

Christoph Hellwig wrote:
>And exactly these hooks harm. They are all over the place, have performance
>and code size impact and mess up readability. Why can't you just maintain
>an external patch like i.e. mosix folks that nead similar deep changes?

Actually, this is not an accurate description of LSM. As you may know,
the LSM hooks do not have a noticeable performance impact (with the
exception of 1Gb networking, where I believe there is a 1-2% slowdown).
This has been pointed out several times before, and the LSM folks have
posted a pointer to the measurements.