On Thu, 9 Aug 2012, Colin Walters <walters@xxxxxxxxxx> wrote: > Seems to make sense...though someone could also probably get fairly far > by writing a regular expression optimizer. It might not even be that > hard to write a multi-regexp matching engine which took a set of regexps > at once and constructed a single matching DFA for them. Is this really going to help? My slowest system is a P3-866 which takes less than 30ms of user time for "restorecon /bin/bash" and takes a total of 136ms of wall time if the cache is cold. On a 1.8GHz 64bit system it's only 8ms of user time. What benefit are we expecting to get here? -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/ -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.