Re: Penalty of SELinux?
On Sat, 22 Sep 2007 11:29:09 -0400, Douglas A Tutty
<dtutty@porchlight.ca> said:
> I run a bunch of old machines. Now that SELinux is integrated
> (compiled in) to various pieces of Debian, is there a penalty even if
> its not activated?
Not that one can discern. An active SELinux running in
enforcing mode can have upto 7-8% performance hit, but some patches are
going into 2.6.24 that might improve the performance.
Of course, take all bench marks with a grain of salt, including
this one; it all depends on your particular load pattern; and system
resources, etc, etc.
manoj
--
You were s'posed to laugh!
Manoj Srivastava <srivasta@acm.org> <http://www.golden-gryphon.com/>
1024D/BF24424C print 4966 F272 D093 B493 410B 924B 21BA DABB BF24 424C
Reply to: