[lkml]   [2004]   [Aug]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH] [LSM] Rework LSM hooks
    Hi James,

    On Wed, Aug 11, 2004 at 09:20:22PM -0400, James Morris wrote:
    > Also, we still have the option of making COND_SECURITY ia64-specific.

    We could do that. The patch sets security_ops to
    capabilities_security_ops if no LSM is loaded, so it would be OK to
    call into it unconditionally on archs that have a higher penalty for
    a branch than for an indirect call.

    You could just redefine the macro, depending on the arch, indeed.

    We could also drop the unlikely. For the hot paths, the branch
    prediction of the CPU can do its job. So, I'm not religious about
    it; in practice it should make little difference either way.

    My patch was aiming for a zerocost possibility to turn CONFIG_SECURITY
    on. With the unlikely(), I should have gotten as close as one ~1 or 2
    CPU cycles (compare plus correctly predicted branch). That's why I
    put the unlikely.

    Kurt Garloff <> [Koeln, DE]
    Physics:Plasma modeling <> [TU Eindhoven, NL]
    Linux: SUSE Labs (Head) <> [SUSE Nuernberg, DE]
    [unhandled content-type:application/pgp-signature]
     \ /
      Last update: 2005-03-22 14:05    [W:0.019 / U:5.416 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site