Re: Penalty of SELinux?
On Sat, Sep 22, 2007 at 11:38:29PM -0500, Manoj Srivastava wrote:
> On Sat, 22 Sep 2007 11:29:09 -0400, Douglas A Tutty
> <dtutty@porchlight.ca> said:
>
> > I run a bunch of old machines. Now that SELinux is integrated
> > (compiled in) to various pieces of Debian, is there a penalty even if
> > its not activated?
>
> Not that one can discern. An active SELinux running in
> enforcing mode can have upto 7-8% performance hit, but some patches are
> going into 2.6.24 that might improve the performance.
>
> Of course, take all bench marks with a grain of salt, including
> this one; it all depends on your particular load pattern; and system
> resources, etc, etc.
>
On small systems, what about the penalty of just larger binaries? I
have some older boxes with 16-64 MB ram.
Doug.
Reply to: