Yuichi Nakamura 788e7dd4c2 SELinux: Improve read/write performance ...

It reduces the selinux overhead on read/write by only revalidating
permissions in selinux_file_permission if the task or inode labels have
changed or the policy has changed since the open-time check.  A new LSM
hook, security_dentry_open, is added to capture the necessary state at open
time to allow this optimization.

(see http://marc.info/?l=selinux&m=118972995207740&w=2)

Signed-off-by: Yuichi Nakamura<ynakam@hitachisoft.jp>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>

2007-10-17 08:59:31 +10:00

..

include

SELinux: Improve read/write performance

2007-10-17 08:59:31 +10:00

ss

SELinux: tune avtab to reduce memory usage

2007-10-17 08:59:30 +10:00

avc.c

SELinux: Improve read/write performance

2007-10-17 08:59:31 +10:00

exports.c

[PATCH] selinux: rename selinux_ctxid_to_string

2006-09-26 08:48:52 -07:00

hooks.c

SELinux: Improve read/write performance

2007-10-17 08:59:31 +10:00

Kconfig

Fix trivial typos in Kconfig* files

2007-05-09 07:12:20 +02:00

Makefile

SELinux: extract the NetLabel SELinux support from the security server

2007-04-26 01:35:48 -04:00

netif.c

[NET]: Make device event notification network namespace safe

2007-10-10 16:49:09 -07:00

netlabel.c

SELinux: restore proper NetLabel caching behavior

2007-08-02 11:52:21 -04:00

netlink.c

[NET]: Support multiple network namespaces with netlink

2007-10-10 16:49:09 -07:00

nlmsgtab.c

Audit: add TTY input auditing

2007-07-16 09:05:47 -07:00

selinuxfs.c

selinux: add selinuxfs structure for object class discovery

2007-07-11 22:52:20 -04:00

xfrm.c

SELinux: null-terminate context string in selinux_xfrm_sec_ctx_alloc

2007-07-25 12:49:41 -04:00