Re: [PATCH] selinux: Inode label revalidation performance fix

2016-01-06 Thread Stephen Smalley
On 01/05/2016 05:12 PM, Andreas Gruenbacher wrote: Commit 5d226df4 has introduced a performance regression of about 10% in the UnixBench pipe benchmark. It turns out that the call to inode_security in selinux_file_permission can be moved below the zero-mask test and that

[PATCH] selinux: Inode label revalidation performance fix

2016-01-05 Thread Andreas Gruenbacher
Commit 5d226df4 has introduced a performance regression of about 10% in the UnixBench pipe benchmark. It turns out that the call to inode_security in selinux_file_permission can be moved below the zero-mask test and that inode_security_revalidate can be removed entirely, which brings us back to