SELinux: remove unused av.decided field
authorEric Paris <eparis@redhat.com>
Thu, 12 Feb 2009 19:50:54 +0000 (14:50 -0500)
committerJames Morris <jmorris@namei.org>
Fri, 13 Feb 2009 22:23:08 +0000 (09:23 +1100)
commitf1c6381a6e337adcecf84be2a838bd9e610e2365
treea6e0857db27a38b0976fb422836f9443241b4b61
parent21193dcd1f3570ddfd8a04f4465e484c1f94252f
SELinux: remove unused av.decided field

It appears there was an intention to have the security server only decide
certain permissions and leave other for later as some sort of a portential
performance win.  We are currently always deciding all 32 bits of
permissions and this is a useless couple of branches and wasted space.
This patch completely drops the av.decided concept.

This in a 17% reduction in the time spent in avc_has_perm_noaudit
based on oprofile sampling of a tbench benchmark.

Signed-off-by: Eric Paris <eparis@redhat.com>
Reviewed-by: Paul Moore <paul.moore@hp.com>
Acked-by: Stephen Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
security/selinux/avc.c
security/selinux/include/security.h
security/selinux/selinuxfs.c
security/selinux/ss/services.c