iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/security/apparmor
History
Mateusz Guzik f4fee216df apparmor: try to avoid refing the label in apparmor_file_open 
If the label is not stale (which is the common case), the fact that the
passed file object holds a reference can be leverged to avoid the
ref/unref cycle. Doing so reduces performance impact of apparmor on
parallel open() invocations.

When benchmarking on a 24-core vm using will-it-scale's open1_process
("Separate file open"), the results are (ops/s):
before: 6092196
after:  8309726 (+36%)

Signed-off-by: Mateusz Guzik <mjguzik@gmail.com>
Signed-off-by: John Johansen <john.johansen@canonical.com>
2024-07-24 11:05:14 -07:00
..
include
apparmor: try to avoid refing the label in apparmor_file_open
2024-07-24 11:05:14 -07:00
.gitignore
.gitignore: add SPDX License Identifier
2020-03-25 11:50:48 +01:00
apparmorfs.c
apparmor: fix possible NULL pointer dereference
2024-05-10 08:59:05 -07:00
audit.c
apparmor: add io_uring mediation
2023-10-18 15:58:49 -07:00
capability.c
apparmor: Fix some kernel-doc comments
2023-10-23 00:25:49 -07:00
crypto.c
apparmor: switch SECURITY_APPARMOR_HASH from sha1 to sha256
2023-11-19 00:47:56 -08:00
domain.c
apparmor: declare stack_msg as static
2023-11-19 00:48:12 -08:00
file.c
apparmor: remove useless static inline function is_deleted
2024-05-10 08:44:43 -07:00
ipc.c
apparmor: refcount the pdb
2023-10-18 15:30:47 -07:00
Kconfig
apparmor: switch SECURITY_APPARMOR_HASH from sha1 to sha256
2023-11-19 00:47:56 -08:00
label.c
apparmor: refcount the pdb
2023-10-18 15:30:47 -07:00
lib.c
apparmor: fix possible memory leak in unpack_trans_table
2024-01-04 01:34:00 -08:00
lsm.c
apparmor: try to avoid refing the label in apparmor_file_open
2024-07-24 11:05:14 -07:00
Makefile
+ Features
2022-12-14 13:42:09 -08:00
match.c
apparmor: refcount the pdb
2023-10-18 15:30:47 -07:00
mount.c
apparmor: take nosymfollow flag into account
2024-07-24 10:33:58 -07:00
net.c
apparmor: refcount the pdb
2023-10-18 15:30:47 -07:00
nulldfa.in
apparmor: cleanup add proper line wrapping to nulldfa.in
2018-02-09 11:30:01 -08:00
path.c
security: apparmor: delete repeated words in comments
2021-02-07 04:15:46 -08:00
policy_compat.c
apparmor: fixup return comments for kernel doc cleanups by Gaosheng Cui
2023-08-08 13:12:19 -07:00
policy_ns.c
apparmor: remove unused functions in policy_ns.c/.h
2023-10-15 21:44:31 -07:00
policy_unpack_test.c
apparmor: test: add MODULE_DESCRIPTION()
2024-07-24 10:35:31 -07:00
policy_unpack.c
apparmor: use kvfree_sensitive to free data->data
2024-05-10 08:32:35 -07:00
policy.c
apparmor: use kvfree_sensitive to free data->data
2024-05-10 08:32:35 -07:00
procattr.c
AppArmor: Add selfattr hooks
2023-11-12 22:54:42 -05:00
resource.c
apparmor: pass cred through to audit info.
2023-10-18 15:30:38 -07:00
secid.c
apparmor: fix kernel-doc complaints
2023-01-10 10:04:35 -08:00
stacksplitdfa.in
apparmor: use the dfa to do label parse string splitting
2018-02-09 11:30:01 -08:00
task.c
apparmor: add missing params to aa_may_ptrace kernel-doc comments
2023-11-19 01:19:41 -08:00