Announcement

Collapse
No announcement yet.

The Performance Cost To SELinux On Fedora 31

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • The Performance Cost To SELinux On Fedora 31

    Phoronix: The Performance Cost To SELinux On Fedora 31

    Following the recent AppArmor performance regression in Linux 5.5 (since resolved), some Phoronix readers had requested tests out of curiosity in looking at the performance impact of Fedora's decision to utilize SELinux by default. Here is how the Fedora Workstation 31 performance compares out-of-the-box with SELinux to disabling it.

    http://www.phoronix.com/vr.php?view=28798

  • #2
    Thanks for those tests. That's something I've always been curious of.

    It honestly isn't all that surprising to me that extra security has a performance impact and just I'm glad it isn't that bad.

    Comment


    • #3
      Thanks. At least it’s better than expected.

      Comment


      • #4
        I honestly expected worse, but good to know it's quite acceptable.

        Comment


        • #5
          I've seen nothing to worry about.

          Comment


          • #6
            Originally posted by Britoid View Post
            I honestly expected worse, but good to know it's quite acceptable.
            Same here, considering SELinux is pretty heavy in my opinion (like I have to mess with the cons all the time since for mysterious reasons I can't do anything with this file or this other file).

            Comment


            • #7
              Michael I'm really loving the way you are graphing the results now, first highlighting the biggest perf differences and in the end we have the geometric mean, showing that those differences might not apply to real-world usage

              Comment


              • #8
                There is a performance cost. There is also a data breach cost. While the first might range from a nuisance to a proper cost of making business, the second one may expose you to regulation penalties and threaten your whole business' existence. Those who use it, really need it.

                Comment


                • #9
                  I wonder how it compares to AppArmor, both from security and performance perspectives.

                  Comment


                  • #10
                    Originally posted by sarmad View Post
                    I wonder how it compares to AppArmor, both from security and performance perspectives.
                    there are already tests of AA performance price. It would be nice to see a benchmark done after it was fixed though.

                    and there is plenty of comparisons between selinux and apparmor

                    Comment

                    Working...
                    X