• E
    SELinux: remove the unused ae.used · 906d27d9
    Eric Paris 提交于
    Currently SELinux code has an atomic which was intended to track how many
    times an avc entry was used and to evict entries when they haven't been
    used recently.  Instead we never let this atomic get above 1 and evict when
    it is first checked for eviction since it hits zero.  This is a total waste
    of time so I'm completely dropping ae.used.
    
    This change resulted in about a 3% faster avc_has_perm_noaudit when running
    oprofile against a tbench benchmark.
    Signed-off-by: NEric Paris <eparis@redhat.com>
    Reviewed by: Paul Moore <paul.moore@hp.com>
    Acked-by: NStephen Smalley <sds@tycho.nsa.gov>
    Signed-off-by: NJames Morris <jmorris@namei.org>
    906d27d9
avc.c 23.6 KB