SELinux Sees Nice Optimizations With Linux 5.8
Written by Michael Larabel in Linux Security on 2 June 2020 at 07:18 PM EDT. Add A Comment
LINUX SECURITY --
Security Enhanced Linux is seeing some nice optimizations with the in-development Linux 5.8 kernel.

One of the optimizations in Linux 5.8 for SELinux is changing around some of their internal data structures for improving performance. One notable area is using a hash table for SELinux role transitions. For storing role transitions within a hash table, on Fedora where there are around 428 role transitions, the run-time was cut by about 50% when testing with Stress-NG benchmarks.

There is also a new SELinux policy version for more efficient storing of filename transitions in the binary policy. With that work, the change dropped the policy size on a test system from a reported ~7.6MB to ~3.3MB. The kernel policy load time was also reduced.

More details on these nice optimizations and other changes for SELinux in the 5.8 kernel via this pull.

Our last SELinux benchmarks were in January so perhaps it's time to run some fresh numbers soon.
Related News
About The Author
Author picture

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter or contacted via MichaelLarabel.com.

Popular News This Week