Re: ufs multilabel performance (fwd)

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--1030603365-960894060-1334697869=:5815
Content-Type: TEXT/PLAIN; charset=iso-8859-2; format=flowed
Content-Transfer-Encoding: 8BIT

Without any benchmarks I would also think for the high io, in the xen dom0 
I see high disk activity (eg 99% writes) when using mac labels. But of 
course I will do the tests, please give some instructions, how to compile 
the kernel, how the implement the benchmark.

Thanks in advance,

Kojedzinszky Richard
Euronet Magyarorszag Informatikai Zrt.

On Tue, 17 Apr 2012, Edward Tomasz Napiera豉 wrote:

> Date: Tue, 17 Apr 2012 22:57:09 +0200
> From: Edward Tomasz Napiera豉 <trasz@FreeBSD.org>
> To: Adrian Chadd <adrian@freebsd.org>
> Cc: Richard Kojedzinszky <krichy@tvnetwork.hu>,
>     Garrett Cooper <yanegomi@gmail.com>, freebsd-security@freebsd.org,
>     freebsd-performance@freebsd.org,
>     Current FreeBSD <freebsd-current@freebsd.org>,
>     O. Hartmann <ohartman@zedat.fu-berlin.de>
> Subject: Re: ufs multilabel performance (fwd)
> 
> Wiadomo嗆 napisana przez Adrian Chadd w dniu 17 kwi 2012, o godz. 21:17:
>> On 16 April 2012 23:31, Richard Kojedzinszky <krichy@tvnetwork.hu> wrote:
>>>
>>> So now reactions here, creating files with multilabel is still slow.
>>>
>>> I would like to use multilabel access control on my /tmp, for example, my
>>> web server places it's session files there in a subdirectory. Of course, I
>>> would like to assign a label for that subdir, but with this slow file
>>> creation, that is not the way to go. I may then use a different filesystem
>>> for that. In this case, can I assign a root mac label for a mount point?
>>
>> Hi,
>>
>> This is a perfect job for hwpmc / dtrace.
>>
>> Would you be able to load up either of those and get some CPU usage
>> statistics whilst you're running your benchmark?
>>
>> It's either that, or it's (massive) locking contention.
>
> Or disk I/O.  MAC labels, just like ACLs, are stored in extended attributes,
> and I remember something about writing those being synchronous.
>
> -- 
> If you cut off my head, what would I say?  Me and my head, or me and my body?
>
--1030603365-960894060-1334697869=:5815
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
--1030603365-960894060-1334697869=:5815--