Hannu Krosing wrote:
>> If we compile it with --enable-selinux, it has two working modes
>> controled by a guc option: sepostgresql (bool).
>> If it is disabled, all the sepgsqlXXXX() invocations returns at
>> the head of themself without doing anything.
>>
>> I believe this behavior follows the previous suggestion.
> 
> Have you been able to measure any speed difference between
> --enable-selinux on and off ?

At the last night, I measured TPS by pgbench in three cases:
 1) A binary compiled without --enable-selinux
 2) A binary compiled with --enable-selinux, runtime disabled
 3) A binary compiled with --enable-selinux, runtime enabled

Then, I cannot observe statically meaningful differences here.

* Environment
 CPU: Core2Duo E6400 (2.13GHz)
 Mem: 2048MB
 kernel: 2.6.28-3.fc11.i686

* Parameters
 - shared_buffers = 512MB
 - rest of parameters are in the default

* Benchmarch
 % pgbench -i -s 10 postgres
 % pgbench -c 2 -t 100000 postgres  ---> 6 times

* Results
 (1) compiled without --enable-selinux
 1st: 478.565569
 2nd: 478.223391
 3rd: 442.365636
 4th: 468.988499
 5th: 482.173836
 6th: 448.208615
-----------------
 AVG: 466.420924 (STD: 17.0404)

 (2) compiled with --enable-selinux, runtime disabled
 1st: 469.005777
 2nd: 485.602091
 3rd: 449.096123
 4th: 460.657368
 5th: 476.791923
 6th: 444.027405
-----------------
 AVG: 464.196781 (STD: 16.0456)

 (3) compiled with --enable-selinux, runtime enabled
 1st: 462.702242
 2nd: 473.312013
 3rd: 442.214347
 4th: 468.465614
 5th: 473.498682
 6th: 468.973759
-----------------
 AVG: 464.861109 (STD: 11.7768)

-- 
OSS Platform Development Division, NEC
KaiGai Kohei <kai...@ak.jp.nec.com>

-- 
Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-hackers

Reply via email to