[apparmor] [PATCH 03/11] Split dfa minimize hashing to improve control
Steve Beattie
steve at nxnw.org
Fri Oct 22 08:13:14 BST 2010
On Mon, Oct 18, 2010 at 05:20:35PM -0700, John Johansen wrote:
> Split dfa minimizing hashing into two seperately controllable hashes. The
> first hash does hashing on state just state transitions, which always results
> in a performance improvement.
>
> The second does hashing based off of accept permissions, which can create
> more initial states but can result in not being able to achieve a true
> minimum dfa. This can also lead to slowing down total dfa creation because
> while minimization, compression can take longer if the dfa isn't completely
> minimized.
>
> permission hashing is currently required, as minimization does not accumulate
> redundant Node permissions.
ACK.
--
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
Url : https://lists.ubuntu.com/archives/apparmor/attachments/20101022/d5f1108d/attachment.pgp
More information about the AppArmor
mailing list