Re: I am thinking of adding compression to libselinux

2013-09-24 Thread drago01
On Thu, Sep 12, 2013 at 3:42 PM, Matthew Miller wrote: > On Thu, Sep 12, 2013 at 03:18:58PM +0200, drago01 wrote: >> > It's basically down to the three big unsolved problems (kernel modules, >> > translations, docs) and then several dozen little things like this. If >> > getting really small is a

Re: I am thinking of adding compression to libselinux

2013-09-24 Thread Matthew Miller
On Thu, Sep 12, 2013 at 09:19:00AM -0400, Josh Boyer wrote: > > It's basically down to the three big unsolved problems (kernel modules, > > translations, docs) and then several dozen little things like this. If > > getting really small is a priority we need to solve the big problems, but > > chippi

Re: I am thinking of adding compression to libselinux

2013-09-12 Thread Richard W.M. Jones
On Thu, Sep 12, 2013 at 07:53:30AM -0400, Daniel J Walsh wrote: > Basically looking at compressing the policy file to shrink SELinux footprint > in the minimal install/cloud image. > > Currently the policy modules (pp files) are shipped with bzip compression but > the actually policy file. > > Bu

Re: I am thinking of adding compression to libselinux

2013-09-12 Thread Bill Nottingham
Richard W.M. Jones (rjo...@redhat.com) said: > On Thu, Sep 12, 2013 at 09:16:13AM -0400, Matthew Miller wrote: > > On Thu, Sep 12, 2013 at 02:11:04PM +0200, Lennart Poettering wrote: > > > (That said, our minimal image is a couple of 100mb still, iirc, so 2mb > > > is not tht much.) > > > > I

Re: I am thinking of adding compression to libselinux

2013-09-12 Thread Richard W.M. Jones
On Thu, Sep 12, 2013 at 09:16:13AM -0400, Matthew Miller wrote: > On Thu, Sep 12, 2013 at 02:11:04PM +0200, Lennart Poettering wrote: > > (That said, our minimal image is a couple of 100mb still, iirc, so 2mb > > is not tht much.) > > It's basically down to the three big unsolved problems (ker

Re: I am thinking of adding compression to libselinux

2013-09-12 Thread Matthew Miller
On Thu, Sep 12, 2013 at 03:18:58PM +0200, drago01 wrote: > > It's basically down to the three big unsolved problems (kernel modules, > > translations, docs) and then several dozen little things like this. If > > getting really small is a priority we need to solve the big problems, but > > chipping

Re: I am thinking of adding compression to libselinux

2013-09-12 Thread Josh Boyer
On Thu, Sep 12, 2013 at 9:16 AM, Matthew Miller wrote: > On Thu, Sep 12, 2013 at 02:11:04PM +0200, Lennart Poettering wrote: >> (That said, our minimal image is a couple of 100mb still, iirc, so 2mb >> is not tht much.) > > It's basically down to the three big unsolved problems (kernel modules

Re: I am thinking of adding compression to libselinux

2013-09-12 Thread drago01
On Thu, Sep 12, 2013 at 3:16 PM, Matthew Miller wrote: > On Thu, Sep 12, 2013 at 02:11:04PM +0200, Lennart Poettering wrote: >> (That said, our minimal image is a couple of 100mb still, iirc, so 2mb >> is not tht much.) > > It's basically down to the three big unsolved problems (kernel modules

Re: I am thinking of adding compression to libselinux

2013-09-12 Thread Matthew Miller
On Thu, Sep 12, 2013 at 02:11:04PM +0200, Lennart Poettering wrote: > (That said, our minimal image is a couple of 100mb still, iirc, so 2mb > is not tht much.) It's basically down to the three big unsolved problems (kernel modules, translations, docs) and then several dozen little things like

Re: I am thinking of adding compression to libselinux

2013-09-12 Thread Lennart Poettering
On Thu, 12.09.13 08:16, Daniel J Walsh (dwa...@redhat.com) wrote: > > Well, you might buy smaller footprint with slower boot time, but I figure > > without trying it there's no way to know that for sure. > > > > (That said, our minimal image is a couple of 100mb still, iirc, so 2mb is > > not tha

Re: I am thinking of adding compression to libselinux

2013-09-12 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/12/2013 08:11 AM, Lennart Poettering wrote: > On Thu, 12.09.13 07:53, Daniel J Walsh (dwa...@redhat.com) wrote: > >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >> >> Basically looking at compressing the policy file to shrink SELinux >> footp

Re: I am thinking of adding compression to libselinux

2013-09-12 Thread Lennart Poettering
On Thu, 12.09.13 07:53, Daniel J Walsh (dwa...@redhat.com) wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Basically looking at compressing the policy file to shrink SELinux footprint > in the minimal install/cloud image. > > Currently the policy modules (pp files) are shipped with

Re: I am thinking of adding compression to libselinux

2013-09-12 Thread kaperang07
> -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Basically looking at compressing the policy file to shrink SELinux footprint > in the minimal install/cloud image. > > Currently the policy modules (pp files) are shipped with bzip compression but > the actually policy file. > > But the /etc/

I am thinking of adding compression to libselinux

2013-09-12 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Basically looking at compressing the policy file to shrink SELinux footprint in the minimal install/cloud image. Currently the policy modules (pp files) are shipped with bzip compression but the actually policy file. But the /etc/selinux/targeted/pol