Re: [SE/Linux] status / progress report 13jun2004

2004-06-18 Thread Luke Kenneth Casson Leighton
On Mon, Jun 14, 2004 at 09:59:21AM -0400, James Morris wrote: > On Mon, 14 Jun 2004, Russell Coker wrote: > > > On Mon, 14 Jun 2004 03:01, Christoph Hellwig <[EMAIL PROTECTED]> wrote: > > > > It's actually disabled again (compiled in but disabled) in SuSE because > > > the performance hit was muc

Re: [SE/Linux] status / progress report 13jun2004

2004-06-14 Thread Christoph Hellwig
On Mon, Jun 14, 2004 at 09:59:21AM -0400, James Morris wrote: > > > It's actually disabled again (compiled in but disabled) in SuSE because > > > the performance hit was much much worse. And I remember benchmark > > > numbers where the lsm hooks alone decreased the SpecWeb numbers on ia64 > > > by

Re: [SE/Linux] status / progress report 13jun2004

2004-06-14 Thread James Morris
On Mon, 14 Jun 2004, Russell Coker wrote: > On Mon, 14 Jun 2004 03:01, Christoph Hellwig <[EMAIL PROTECTED]> wrote: > > It's actually disabled again (compiled in but disabled) in SuSE because > > the performance hit was much much worse. And I remember benchmark > > numbers where the lsm hooks al

Re: [SE/Linux] status / progress report 13jun2004

2004-06-14 Thread James Morris
On Sun, 13 Jun 2004, Luke Kenneth Casson Leighton wrote: > * debian kernels need to be available compiled with se/linux security > enabled (and boot-time optional) by default. this results in a > 2% performance hit (wow big deal) when se/linux is not enabled > at boot time. Gentoo, SuSE an

Re: [SE/Linux] status / progress report 13jun2004

2004-06-14 Thread Russell Coker
On Mon, 14 Jun 2004 03:01, Christoph Hellwig <[EMAIL PROTECTED]> wrote: > On Sun, Jun 13, 2004 at 03:36:48PM +, Luke Kenneth Casson Leighton wrote: > > * debian kernels need to be available compiled with se/linux security > > enabled (and boot-time optional) by default. this results in a >

Re: [SE/Linux] status / progress report 13jun2004

2004-06-13 Thread GOTO Masanori
At Sun, 13 Jun 2004 19:01:46 +0200, Christoph Hellwig wrote: > On Sun, Jun 13, 2004 at 03:36:48PM +, Luke Kenneth Casson Leighton wrote: > > * debian kernels need to be available compiled with se/linux security > > enabled (and boot-time optional) by default. this results in a > > 2% perfo

Re: [SE/Linux] status / progress report 13jun2004

2004-06-13 Thread Christoph Hellwig
On Sun, Jun 13, 2004 at 03:36:48PM +, Luke Kenneth Casson Leighton wrote: > * debian kernels need to be available compiled with se/linux security > enabled (and boot-time optional) by default. this results in a > 2% performance hit (wow big deal) when se/linux is not enabled > at boot ti

[SE/Linux] status / progress report 13jun2004

2004-06-13 Thread Luke Kenneth Casson Leighton
This is a status / progress report for Debian / SE/Linux integration. I look forward to the day when it need no longer be maintained, which will be when all of the outstanding issues have been addressed. The constant work-in-progress version of this report will always be available from: h