SELinux Seeing Performance Improvements With Linux 5.7
Written by Michael Larabel in Linux Security on 2 April 2020 at 01:29 AM EDT. 5 Comments
LINUX SECURITY --
A few months back when we last looked at the performance impact of having SELinux enabled there was a hit but not too bad for most workloads. But we'll need to take another look soon as with the Linux 5.7 kernel are some performance improvements and more for SELinux.

The NSA-backed Security Enhanced Linux has seen a fair amount of work build up for the now-open Linux 5.7 kernel merge window. The highlights of the new SELinux work for v5.7 includes:

- Optimizing how filename transitions in the kernel are stored to provide faster policy load times.

- More accurate calculations of internal hash table size needs to also help with policy load times and "likely" general SELinux performance improvements. It will be interesting to see if this carries over indeed to general SELinux performance benefits.

- Support for per-file labeling for the BPF file-system.

- Fixes for NFS v4.2 and XFS file-systems.

That's more than we see for SELinux most kernel cycles. The full list of SELinux updates via this pull request.
Related News
About The Author
Author picture

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter or contacted via MichaelLarabel.com.

Popular News This Week