[apparmor] [PATCH 03/11] Split dfa minimize hashing to improve control

[Steve Beattie]

On Mon, Oct 18, 2010 at 05:20:35PM -0700, John Johansen wrote:
> Split dfa minimizing hashing into two seperately controllable hashes.  The
> first hash does hashing on state just state transitions, which always results
> in a performance improvement.
> 
> The second does hashing based off of accept permissions, which can create
> more initial states but can result in not being able to achieve a true
> minimum dfa.  This can also lead to slowing down total dfa creation because
> while minimization, compression can take longer if the dfa isn't completely
> minimized.
> 
> permission hashing is currently required, as minimization does not accumulate
> redundant Node permissions.

ACK.

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
Url : https://lists.ubuntu.com/archives/apparmor/attachments/20101022/d5f1108d/attachment.pgp