Re: [RFC][PATCH 11/11] security: AppArmor - Export namespace semaphore

From: Tony Jones
Date: Thu Apr 20 2006 - 15:49:24 EST


On Thu, Apr 20, 2006 at 08:21:28AM -0500, Serge E. Hallyn wrote:

> Tony, do you have any performance measurements? Both for unconfined and
> confined apps? Presumably unconfined processes should have 0 performance
> hit, right?

Hi Serge.

We have lmbench results. We had issues getting reproducability out of dbench
but need to look at it some more. The lmbench figures we presently have are
from the old code (reader writer lock). Results were good but we recently
converted to rcu for the reader dominated rw locks.

I'm not sure there is "0 performance hit for unconfined" as you have to check
for them being unconfined :) but it's low.

If you have other benchmarks we are open to suggestions. What has been used
to benchmark SELinux?

Anyways, we need to regenerate the results, we'll try and post in the next
couple days. ok?

Thanks

Tony
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/