Can we eliminate or optimize nodups_specs within libselinux

Can we eliminate or optimize nodups_specs within libselinux

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

We are costing boot 1.5s

https://bugzilla.redhat.com/show_bug.cgi?id=709014
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk3mQX8ACgkQrlYvE4MpobPXQQCeI/tBMC9RFJ1hH8/5hRoX2axs
NQAAmweIx78ux8VIa+/T4oX03MLJAhi1
=4Xh4
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Can we eliminate or optimize nodups_specs within libselinux

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/01/2011 09:41 AM, Daniel J Walsh wrote:
> We are costing boot 1.5s
> 
> https://bugzilla.redhat.com/show_bug.cgi?id=709014

- --
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
with
the words "unsubscribe selinux" without quotes as the message.

This seems to be something libsemanage should do to verify the
file_context file is good, but libselinux should just figure the
file_context file is sane.  And be optimised to read access.

Might be a reason tools like install run slow also.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk3mQwsACgkQrlYvE4MpobMxHwCghBRuPpL2c8wGITLeF6jAGRsO
3yUAnimXDBNaeM4aNYuVQSv7zBOaigmF
=9XXq
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Can we eliminate or optimize nodups_specs within libselinux

[Christopher J. PeBenito]

On 06/01/11 09:47, Daniel J Walsh wrote:
> On 06/01/2011 09:41 AM, Daniel J Walsh wrote:
>> > We are costing boot 1.5s
>> > 
>> > https://bugzilla.redhat.com/show_bug.cgi?id=709014
> 
> This seems to be something libsemanage should do to verify the
> file_context file is good, but libselinux should just figure the
> file_context file is sane.  And be optimised to read access.

Makes sense.  It probably should have been doing this for a long time
anyway, since it needs to take into account for genhomedircon output and
local file contexts.  I think it should also cause a transaction fail if
there are file context errors.

> Might be a reason tools like install run slow also.

I'd bet on it, since all those tools do is, basically, matchpathcon()
then setfscreatecon().

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.