These changes improve the performance of libsepol's avtab as used by check_assertions, especially for large policies. On Fedora, this reduces the time to check assertions from over an hour (I never finished!) to about 3 minutes. There is a lot more low-hanging performance fruit here, but this makes a decent start - and it should allow these assertions to be enabled as part of the policy build again. John Brooks (3): Build libsepol with -O2 Use a better hash function for libsepol's avtab Tweak avtab hash table parameters for better performance libsepol/include/sepol/policydb/avtab.h | 4 ++-- libsepol/src/Makefile | 2 +- libsepol/src/avtab.c | 39 ++++++++++++++++++++++++++++----- 3 files changed, 36 insertions(+), 9 deletions(-) -- 1.9.3 _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.