From: Siarhei Liakh <siarhei.liakh@xxxxxxxxxxxxxxxxx> This patch introduces "Advanced Hashing" Kconfig option for SELinux, which is used by subsequent patches to switch between faster, simpler local hash functions and a bit slower, but much better ones from standard Linux library. The patch only adds an option; hash function changes are provided as separate patches, one per function changed. Signed-off-by: Siarhei Liakh <siarhei.liakh@xxxxxxxxxxxxxxxxx> --- Please CC me directly in all replies. security/selinux/Kconfig | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/security/selinux/Kconfig b/security/selinux/Kconfig index 9e921fc72538..4b5c9fa510a1 100644 --- a/security/selinux/Kconfig +++ b/security/selinux/Kconfig @@ -61,6 +61,15 @@ config SECURITY_SELINUX_DEVELOP permissive mode (if permitted by the policy) via /sys/fs/selinux/enforce. +config SECURITY_SELINUX_ADVANCED_HASHING + bool "Advanced hashing for primary hash tables" + depends on SECURITY_SELINUX + default n + help + This enables better, but a little slower hashing functions in hash + tables. New hashing function greatly reduces hash collisions, thus + improving performance of large/complex SELinux configurations. + config SECURITY_SELINUX_AVC_STATS bool "NSA SELinux AVC Statistics" depends on SECURITY_SELINUX -- 2.17.1
