On Mon, 7 May 2001, Chris Wright wrote: > * jmjonesat_private (jmjonesat_private) wrote: > > > > Left the suggested default at "N", but will set it up both ways. > > Was mostly looking at "total not" vs. "total without". Good thinking. > > Capabilities is currently integrated with the kernel. So the lsm patch with > just the dummy interface that gratuitously returns yes is not exactly an apples > to apples test with standard (non-lsm) capabilities-enabled kernel. True. Although the ability to run the kernel with only "olde style" security may be useful, I'm trying to get results up with a capabilities module loaded. > I agree > with Greg, it'd be interesting to see what the results look like with the > capabilities module loaded. I've had no problem running the capability_plug > as a module (let me know if i can help you here). > Have, off-list. Having some trouble getting the module to initialize when everything is compiled with .config going totally default (except, of course, the target option set to i586 for my current benchmark systems) except for CONFIG_CAPABILITIES=m. It's probably me... but any help would be appreciated. > Thanks for the first set of benchmarks! My pleasure. I'm pleasantly surprised that they both reinforce the assertions about overhead AND point to a place or two that optimization might be helpful. The results posted to list AND the RAW DATA are now at http://lsm.antisoft.com/benchmarks/ Although, it's a "quick-html" job... will beautify it later. > -chris J. Melvin Jones |>------------------------------------------------------ || J. MELVIN JONES jmjonesat_private |>------------------------------------------------------ || Microcomputer Systems Consultant || Software Developer || Web Site Design, Hosting, and Administration || Network and Systems Administration |>------------------------------------------------------ || http://www.jmjones.com/ |>------------------------------------------------------ _______________________________________________ linux-security-module mailing list linux-security-moduleat_private http://mail.wirex.com/mailman/listinfo/linux-security-module
This archive was generated by hypermail 2b30 : Tue May 08 2001 - 08:20:35 PDT