Eamon Walsh <ewalsh@xxxxxxxxxxxxx> wrote: > Don't have a suggestion on the usage, but your overhead is coming from > the loading of the file contexts database on each invocation of > /bin/install. You could try to make the gettext installer more > judicious about batching things into a single /bin/install command > line. Or make install a shell builtin, so that it's not a separate > process. Thanks for the suggestions, but unfortunately, neither is feasible, since the Makefile install rules are generated by automake. > There is a new handle-based set of calls that replaces matchpathcon() > and friends. See include/selinux/label.h. If you're rewriting this > part of the code, I'd recommend switching over. It won't affect > performance too much I'm afraid, but maybe at some point there will be > a daemon backend of some sort so it just makes an IPC call instead of > loading the database in the library code. Good to know. I'll hold off for now, since there'd be no immediate benefit. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
