Thank you for your help Stephen. I have a couple of further questions: 1) The AVC is implemented as a hash-table as the avtab in the policydb. Unlike the latter, the structure involves hlist_node and hlist_head. Where are they defined? 2) I read that performance degradation due to SELinux is 5 to 7% as a rough guess. Would you say that the rule retrieval functionality (in general, from both the AVC and the policydb) can entail a significant role in such estimate, considering the whole system? What is the most functionality in SELinux? Thank you! Stefano _________________________________________________________________ Condividi i tuoi ricordi online con chi vuoi tu. http://www.microsoft.com/italy/windows/windowslive/products/photos-share.aspx?tab=1 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
