Re: ufs multilabel performance (fwd)

Richard Kojedzinszky <[email protected]>
Newsgroups gmane.os.freebsd.security.general,gmane.os.freebsd.current,gmane.os.freebsd.performance
Message-ID <[email protected]>
Without any benchmarks I would also think for the high io, in the xen dom0 
I see high disk activity (eg 99% writes) when using mac labels. But of 
course I will do the tests, please give some instructions, how to compile 
the kernel, how the implement the benchmark.

Thanks in advance,


Kojedzinszky Richard
Euronet Magyarorszag Informatikai Zrt.

On Tue, 17 Apr 2012, Edward Tomasz Napierała wrote:

> Date: Tue, 17 Apr 2012 22:57:09 +0200
> From: Edward Tomasz Napierała <[email protected]>
> To: Adrian Chadd <[email protected]>
> Cc: Richard Kojedzinszky <[email protected]>,
>     Garrett Cooper <[email protected]>, [email protected],
>     [email protected],
>     Current FreeBSD <[email protected]>,
>     O. Hartmann <[email protected]>
> Subject: Re: ufs multilabel performance (fwd)
> 
> Wiadomość napisana przez Adrian Chadd w dniu 17 kwi 2012, o godz. 21:17:
>> On 16 April 2012 23:31, Richard Kojedzinszky <[email protected]> wrote:
>>>
>>> So now reactions here, creating files with multilabel is still slow.
>>>
>>> I would like to use multilabel access control on my /tmp, for example, my
>>> web server places it's session files there in a subdirectory. Of course, I
>>> would like to assign a label for that subdir, but with this slow file
>>> creation, that is not the way to go. I may then use a different filesystem
>>> for that. In this case, can I assign a root mac label for a mount point?
>>
>> Hi,
>>
>> This is a perfect job for hwpmc / dtrace.
>>
>> Would you be able to load up either of those and get some CPU usage
>> statistics whilst you're running your benchmark?
>>
>> It's either that, or it's (massive) locking contention.
>
> Or disk I/O.  MAC labels, just like ACLs, are stored in extended attributes,
> and I remember something about writing those being synchronous.
>
> -- 
> If you cut off my head, what would I say?  Me and my head, or me and my body?
>

_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.