Hi Paul, I can't answer your question about using only MAC and no DAC. But if you really want to get some performance you can do modify your policies. For an interesting example of this look at this presentation by Hitachi about porting SELinux to Android. https://docs.google.com/viewer?url=http://www.celinux.org/elc08_presentations/ELC2008_nakamura.pdf Jason Axelson On Thu, Jun 17, 2010 at 2:49 PM, Paul Otheim <coriolis220@xxxxxxxxx> wrote: > Most of the benchmarking figures I have seen or heard of consistently say > that, depending on what your doing, the average performance hit when running > SELinux is about 5 to 7 percent. My question is if anyone has benchmarked > with no DAC and SELinux only for permissions checks. What, if any, is the > performance gain? Can I get that seven percent back? I know its not a strict > SELinux question but I don't know of any other place to ask such a thing. -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
