Messages in this thread | | | Date | Fri, 14 Mar 2008 18:07:58 +0300 | From | Pavel Emelyanov <> | Subject | Re: [RFC] cgroups: implement device whitelist lsm (v2) |
| |
[snip]
>> The # of rules usually has a linear dependency on the number of containers >> (each of then has to have an access to /dev/null,zero,random at least), so >> having 100 containers we will have to scan through a 300-entries list. > > Oh no, the rules are stored per-container, so it sounds like you're > saying 3 entries per container?
Oops :) I've missed that part :(
>> I'd >> vote for a hash table or a radix/binary/rb tree for that. Or any other way >> for non-linear search you can provide :) > > I'm fine with that, but not for 3 rules :)
So am I :) Anyway - if someday this will grow up to tens of entries turning it into a more scalable lookup would be easy.
> -serge >
| |