* Can we eliminate or optimize nodups_specs within libselinux
@ 2011-06-01 13:41 Daniel J Walsh
2011-06-01 13:47 ` Daniel J Walsh
0 siblings, 1 reply; 3+ messages in thread
From: Daniel J Walsh @ 2011-06-01 13:41 UTC (permalink / raw)
To: SELinux
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
We are costing boot 1.5s
https://bugzilla.redhat.com/show_bug.cgi?id=709014
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk3mQX8ACgkQrlYvE4MpobPXQQCeI/tBMC9RFJ1hH8/5hRoX2axs
NQAAmweIx78ux8VIa+/T4oX03MLJAhi1
=4Xh4
-----END PGP SIGNATURE-----
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Can we eliminate or optimize nodups_specs within libselinux
2011-06-01 13:41 Can we eliminate or optimize nodups_specs within libselinux Daniel J Walsh
@ 2011-06-01 13:47 ` Daniel J Walsh
2011-06-01 14:04 ` Christopher J. PeBenito
0 siblings, 1 reply; 3+ messages in thread
From: Daniel J Walsh @ 2011-06-01 13:47 UTC (permalink / raw)
To: SELinux
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 06/01/2011 09:41 AM, Daniel J Walsh wrote:
> We are costing boot 1.5s
>
> https://bugzilla.redhat.com/show_bug.cgi?id=709014
- --
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
with
the words "unsubscribe selinux" without quotes as the message.
This seems to be something libsemanage should do to verify the
file_context file is good, but libselinux should just figure the
file_context file is sane. And be optimised to read access.
Might be a reason tools like install run slow also.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk3mQwsACgkQrlYvE4MpobMxHwCghBRuPpL2c8wGITLeF6jAGRsO
3yUAnimXDBNaeM4aNYuVQSv7zBOaigmF
=9XXq
-----END PGP SIGNATURE-----
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: Can we eliminate or optimize nodups_specs within libselinux
2011-06-01 13:47 ` Daniel J Walsh
@ 2011-06-01 14:04 ` Christopher J. PeBenito
0 siblings, 0 replies; 3+ messages in thread
From: Christopher J. PeBenito @ 2011-06-01 14:04 UTC (permalink / raw)
To: Daniel J Walsh; +Cc: SELinux
On 06/01/11 09:47, Daniel J Walsh wrote:
> On 06/01/2011 09:41 AM, Daniel J Walsh wrote:
>> > We are costing boot 1.5s
>> >
>> > https://bugzilla.redhat.com/show_bug.cgi?id=709014
>
> This seems to be something libsemanage should do to verify the
> file_context file is good, but libselinux should just figure the
> file_context file is sane. And be optimised to read access.
Makes sense. It probably should have been doing this for a long time
anyway, since it needs to take into account for genhomedircon output and
local file contexts. I think it should also cause a transaction fail if
there are file context errors.
> Might be a reason tools like install run slow also.
I'd bet on it, since all those tools do is, basically, matchpathcon()
then setfscreatecon().
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2011-06-01 14:04 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2011-06-01 13:41 Can we eliminate or optimize nodups_specs within libselinux Daniel J Walsh
2011-06-01 13:47 ` Daniel J Walsh
2011-06-01 14:04 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.