[apparmor] [Bug 903579] Re: AppArmor change_hat slow when lots of hats are loaded

John Johansen john.johansen at canonical.com
Tue Dec 13 07:39:07 UTC 2011


One potential improvement is when shared policy load finally gets
implemented.  All hats in a shared group could be scanned simitaneously
using the dfa, resulting in a linear to input (hat name) cost lookup for
the group.  This would result in each group having a linear lookup cost.

-- 
You received this bug notification because you are a member of AppArmor
Developers, which is the registrant for AppArmor.
https://bugs.launchpad.net/bugs/903579

Title:
  AppArmor change_hat slow when lots of hats are loaded

Status in AppArmor Linux application security framework:
  New

Bug description:
  The apparmor change_hat api uses a linear scan of all hats loaded.
  Which causes it to slow down as the list gets longer.  This should be
  transitioned to a better data structure to make the match faster.

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/903579/+subscriptions



More information about the AppArmor mailing list