2 PerformanceImprovements

John Johansen edited this page 2023-08-30 20:02:57 +00:00

Table of Contents

• Compiler
• kernel
• Libapparmor
• DBus

#Introduction

This is a set of ideas around improving performance

Compiler

See Compiler specific improvements

kernel

• ioctl/sycall query interface
• audit caching
• prompt caching
• hybrid buffer allocation
• prealloc buffers once and pass into mediation loops
• lookup names once, pass down and map
• lockless read side label tree
• merge attachments (single lookup)
• perm query caching

Libapparmor

• query interface

  • use ioctl or syscall interface (1 vs 7 syscalls)
    • cache open interface fd
  • userside cache
    • don't query kernel if already cached
  • Requires
    • ioctl/syscall interface
    • policy change notifications

• features

  • move to tree

DBus

• use new libapparmor with better query/caching
• use apparmor kernel audit