diff options
| author | Stephen Smalley <sds@tycho.nsa.gov> | 2015-03-24 21:54:18 +0100 |
|---|---|---|
| committer | Paul Moore <pmoore@redhat.com> | 2015-04-07 02:16:23 +0200 |
| commit | cf7b6c0205f11cdb015384244c0b423b00e35c69 (patch) | |
| tree | 90b5a4d156b9a70d3437cb057a11928465795e4a /security | |
| parent | selinux: Use a better hash function for avtab (diff) | |
| download | linux-cf7b6c0205f11cdb015384244c0b423b00e35c69.tar.xz linux-cf7b6c0205f11cdb015384244c0b423b00e35c69.zip | |
selinux: increase avtab max buckets
Now that we can safely increase the avtab max buckets without
triggering high order allocations and have a hash function that
will make better use of the larger number of buckets, increase
the max buckets to 2^16.
Original:
101421 entries and 2048/2048 buckets used, longest chain length 374
With new hash function:
101421 entries and 2048/2048 buckets used, longest chain length 81
With increased max buckets:
101421 entries and 31078/32768 buckets used, longest chain length 12
Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: Paul Moore <pmoore@redhat.com>
Diffstat (limited to 'security')
| -rw-r--r-- | security/selinux/ss/avtab.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/selinux/ss/avtab.h b/security/selinux/ss/avtab.h index 6d794a2eee57..adb451cd44f9 100644 --- a/security/selinux/ss/avtab.h +++ b/security/selinux/ss/avtab.h @@ -86,7 +86,7 @@ struct avtab_node *avtab_search_node_next(struct avtab_node *node, int specified void avtab_cache_init(void); void avtab_cache_destroy(void); -#define MAX_AVTAB_HASH_BITS 11 +#define MAX_AVTAB_HASH_BITS 16 #define MAX_AVTAB_HASH_BUCKETS (1 << MAX_AVTAB_HASH_BITS) #endif /* _SS_AVTAB_H_ */ |