On 1/14/2020 1:15 PM, Wenhui Zhang wrote: > > On Tue, Jan 14, 2020 at 4:08 PM Casey Schaufler <casey@xxxxxxxxxxxxxxxx <mailto:casey@xxxxxxxxxxxxxxxx>> wrote: > > On 1/14/2020 12:15 PM, Wenhui Zhang wrote: > > Hi, Casey: > > > > I just performed a performance check on > > 1. v5.3 with DAC only, and > > 2. v5.3 with DAC and MAC framework, an empty-policy enabled in sub-modules(e.g. selinux) > This is great. Do you have data for a system without CONFIG_SECURITY?