selinux: store role transitions in a hash table
authorOndrej Mosnacek <omosnace@redhat.com>
Tue, 7 Apr 2020 18:28:58 +0000 (20:28 +0200)
committerPaul Moore <paul@paul-moore.com>
Fri, 17 Apr 2020 19:20:22 +0000 (15:20 -0400)
commite67b2ec9f6171895e774f6543626913960e019df
treee1520bce539fd62639ab310c6c9385522b48c73f
parent433e3aa37773e8a36858b9417c3e345eff79a079
selinux: store role transitions in a hash table

Currently, they are stored in a linked list, which adds significant
overhead to security_transition_sid(). On Fedora, with 428 role
transitions in policy, converting this list to a hash table cuts down
its run time by about 50%. This was measured by running 'stress-ng --msg
1 --msg-ops 100000' under perf with and without this patch.

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
security/selinux/ss/policydb.c
security/selinux/ss/policydb.h
security/selinux/ss/services.c