On Fri, Feb 28, 2020 at 1:08 PM Stephen Smalley <stephen.smalley.work@xxxxxxxxx> wrote: > > On Thu, Feb 27, 2020 at 11:03 AM Ondrej Mosnacek <omosnace@xxxxxxxxxx> wrote: > > > > This series contains two small changes (these don't seem to affect > > performance measurably, but are nonetheless logical) and a patch that > > changes how the policy optimization "type_map" helper structure is > > represented, which speeds up the whole process. > > > > Ondrej Mosnacek (3): > > libsepol: skip unnecessary check in build_type_map() > > libsepol: optimize inner loop in build_type_map() > > libsepol: speed up policy optimization > > Not a comment on the patches themselves, but this made me wonder if > the optimization support is actually tested by our travis > configuration. > Doesn't appear to be (e.g. no usage of -O/--optimize or semanage.conf > with optimize-policy true). Adding optimize-policy = true to /etc/selinux/semanage.conf and running semodule -BN before and after these patches yields different binary kernel policy files (policy.32). Is that expected?
