Kees Cook 192cf32243 selftests/seccomp: Compare bitmap vs filter overhead ... As part of the seccomp benchmarking, include the expectations with regard to the timing behavior of the constant action bitmaps, and report inconsistencies better. Example output with constant action bitmaps on x86: $ sudo ./seccomp_benchmark 100000000 Current BPF sysctl settings: net.core.bpf_jit_enable = 1 net.core.bpf_jit_harden = 0 Benchmarking 200000000 syscalls... 129.359381409 - 0.008724424 = 129350656985 (129.4s) getpid native: 646 ns 264.385890006 - 129.360453229 = 135025436777 (135.0s) getpid RET_ALLOW 1 filter (bitmap): 675 ns 399.400511893 - 264.387045901 = 135013465992 (135.0s) getpid RET_ALLOW 2 filters (bitmap): 675 ns 545.872866260 - 399.401718327 = 146471147933 (146.5s) getpid RET_ALLOW 3 filters (full): 732 ns 696.337101319 - 545.874097681 = 150463003638 (150.5s) getpid RET_ALLOW 4 filters (full): 752 ns Estimated total seccomp overhead for 1 bitmapped filter: 29 ns Estimated total seccomp overhead for 2 bitmapped filters: 29 ns Estimated total seccomp overhead for 3 full filters: 86 ns Estimated total seccomp overhead for 4 full filters: 106 ns Estimated seccomp entry overhead: 29 ns Estimated seccomp per-filter overhead (last 2 diff): 20 ns Estimated seccomp per-filter overhead (filters / 4): 19 ns Expectations: native ≤ 1 bitmap (646 ≤ 675): ✔️ native ≤ 1 filter (646 ≤ 732): ✔️ per-filter (last 2 diff) ≈ per-filter (filters / 4) (20 ≈ 19): ✔️ 1 bitmapped ≈ 2 bitmapped (29 ≈ 29): ✔️ entry ≈ 1 bitmapped (29 ≈ 29): ✔️ entry ≈ 2 bitmapped (29 ≈ 29): ✔️ native + entry + (per filter * 4) ≈ 4 filters total (755 ≈ 752): ✔️ [YiFei: Changed commit message to show stats for this patch series] Signed-off-by: Kees Cook <keescook@chromium.org> Link: https://lore.kernel.org/r/1b61df3db85c5f7f1b9202722c45e7b39df73ef2.1602431034.git.yifeifz2@illinois.edu		2020-11-20 11:16:34 -08:00
..
accounting
arch	tools kvm headers: Update KVM headers from the kernel sources	2020-11-03 08:46:30 -03:00
bootconfig	Updates for tracing and bootconfig:	2020-10-15 15:51:28 -07:00
bpf	tools/bpftool: Fix attaching flow dissector	2020-11-05 18:20:41 -08:00
build	tools feature: Fixup fast path feature detection	2020-11-03 09:24:20 -03:00
cgroup	blk-iocost: update iocost_monitor.py	2020-09-01 19:38:33 -06:00
debugging
edid
firewire
firmware
gpio	tools: gpio: add debounce support to gpio-event-mon	2020-09-30 10:57:30 +02:00
hv	tools: hv: change http to https in hv_kvp_daemon.c	2020-07-06 10:46:23 +00:00
iio	iio: add IIO_MOD_O2 modifier	2020-08-22 10:53:12 +01:00
include	tools include UAPI: Update linux/mount.h copy	2020-11-03 08:52:11 -03:00
io_uring	tools/io_uring: fix compile breakage	2020-09-21 07:50:58 -06:00
kvm/kvm_stat
laptop
leds
lib	libbpf: Fix possible use after free in xsk_socket__delete	2020-11-04 21:37:29 +01:00
memory-model	tools/memory-model: Expand the cheatsheet.txt notion of relaxed	2020-09-04 11:58:15 -07:00
objtool	objtool changes for v5.10:	2020-10-14 10:13:37 -07:00
pci
pcmcia
perf	perf tools: Add missing swap for cgroup events	2020-11-03 09:16:41 -03:00
power	Merge branch 'turbostat' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux	2020-11-10 10:02:31 -08:00
scripts
spi
testing	selftests/seccomp: Compare bitmap vs filter overhead	2020-11-20 11:16:34 -08:00
thermal/tmon
time
usb	tools: usb: move to tools buildsystem	2020-08-19 14:11:44 +02:00
virtio	virtio: fixes, features	2020-08-11 14:34:17 -07:00
vm	mm: Add PG_arch_2 page flag	2020-09-04 12:46:06 +01:00
wmi
Makefile	bpf: Compile resolve_btfids tool at kernel compilation start	2020-07-13 10:42:02 -07:00