From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S268352AbUHTRUU (ORCPT ); Fri, 20 Aug 2004 13:20:20 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S268389AbUHTRUU (ORCPT ); Fri, 20 Aug 2004 13:20:20 -0400 Received: from open.hands.com ([195.224.53.39]:27557 "EHLO open.hands.com") by vger.kernel.org with ESMTP id S268352AbUHTRUN (ORCPT ); Fri, 20 Aug 2004 13:20:13 -0400 Date: Fri, 20 Aug 2004 18:31:24 +0100 From: Luke Kenneth Casson Leighton To: Kaigai Kohei Cc: James Morris , Stephen Smalley , "SELinux-ML(Eng)" , "Linux Kernel ML(Eng)" Subject: Re: RCU issue with SELinux (Re: SELINUX performance issues) Message-ID: <20040820173124.GA11086@lkcl.net> Mail-Followup-To: Kaigai Kohei , James Morris , Stephen Smalley , "SELinux-ML(Eng)" , "Linux Kernel ML(Eng)" References: <032901c486ba$a3478970$f97d220a@linux.bs1.fc.nec.co.jp> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <032901c486ba$a3478970$f97d220a@linux.bs1.fc.nec.co.jp> User-Agent: Mutt/1.5.5.1+cvs20040105i Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Aug 20, 2004 at 10:36:03PM +0900, Kaigai Kohei wrote: > Hello, everyone. > > Tuesday, August 17, 2004 12:19 AM > James Morris wrote: > > > Is removing direct reference to AVC-Entry approach acceptable? > > > > > > I'll try to consider this issue further. > > > > Sure, if you can make it work without problems. > > The attached patches against to 2.6.8.1 kernel improve the performance > and the scalability of SELinux by RCU-approach. > > The evaluation results are as follows: > > CPU: Itanium2(1GHz) x 4/8/16/32 > Memory: enough (no swap) > OS: 2.6.8.1 (SELinux disabled by 'selinux=0' boot option) > 2.6.8.1 (SELinux enabled) > 2.6.8.1 + rwlock patch by KaiGai > 2.6.8.1 + RCU patch by KaiGai > > The test program iterates write() to files on tmpfs 500,000 times in parallel. ^^^^^ i presume that that is without the xattr patch which adds extended attributes to tmpfs? (see http://hands.com/~lkcl/selinux) l.