From: James Morris <jmorris@namei.org>
To: Stephen Smalley <sds@tycho.nsa.gov>
Cc: Yuichi Nakamura <ynakam@hitachisoft.jp>,
selinux@tycho.nsa.gov, Eric Paris <eparis@parisplace.org>,
kaigai@ak.jp.nec.com, linux-security-module@vger.kernel.org,
linux-kernel@vger.kernel.org
Subject: Re: [PATCH] selinux: Improving SELinux read/write performance
Date: Mon, 17 Sep 2007 14:56:46 -0700 (PDT) [thread overview]
Message-ID: <Xine.LNX.4.64.0709171456150.16840@us.intercode.com.au> (raw)
In-Reply-To: <1190061915.4034.78.camel@moss-spartans.epoch.ncsc.mil>
On Mon, 17 Sep 2007, Stephen Smalley wrote:
> > It reduces the selinux overhead on read/write by only revalidating
> > permissions in selinux_file_permission if the task or inode labels have
> > changed or the policy has changed since the open-time check. A new LSM
> > hook, security_dentry_open, is added to capture the necessary state at
> > open time to allow this optimization.
> >
> > Signed-off-by: Yuichi Nakamura<ynakam@hitachisoft.jp>
>
> Thanks, looks good.
>
> Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Applied to
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/selinux-2.6.git#for-akpm
--
James Morris
<jmorris@namei.org>
prev parent reply other threads:[~2007-09-17 21:57 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-09-14 0:27 Yuichi Nakamura
2007-09-17 20:45 ` Stephen Smalley
2007-09-17 21:56 ` James Morris [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Xine.LNX.4.64.0709171456150.16840@us.intercode.com.au \
--to=jmorris@namei.org \
--cc=eparis@parisplace.org \
--cc=kaigai@ak.jp.nec.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-security-module@vger.kernel.org \
--cc=sds@tycho.nsa.gov \
--cc=selinux@tycho.nsa.gov \
--cc=ynakam@hitachisoft.jp \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®