37 lines
1.4 KiB
Diff
37 lines
1.4 KiB
Diff
|
From 36e494573d7071f9b56670b4777ed14637025d9e Mon Sep 17 00:00:00 2001
|
||
|
From: James Carter <jwcart2@gmail.com>
|
||
|
Date: Mon, 21 Jun 2021 10:56:49 -0400
|
||
|
Subject: [PATCH] libsepol/cil: Reduce the initial symtab sizes for blocks
|
||
|
|
||
|
It is possible to create bad behaving policy that can consume all
|
||
|
of a system's memory (one way is through the use of inheritance).
|
||
|
Analyzing these policies shows that most of the memory usage is for
|
||
|
the block symtabs.
|
||
|
|
||
|
Most of the nineteen symtabs will most likely never be used, so give
|
||
|
these symtabs an initial size of 1. The others are given more
|
||
|
appropriate sizes.
|
||
|
|
||
|
Signed-off-by: James Carter <jwcart2@gmail.com>
|
||
|
Acked-by: Nicolas Iooss <nicolas.iooss@m4x.org>
|
||
|
---
|
||
|
libsepol/cil/src/cil.c | 2 +-
|
||
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
||
|
|
||
|
diff --git a/libsepol/cil/src/cil.c b/libsepol/cil/src/cil.c
|
||
|
index 671b5ec6e183..9d5038d91add 100644
|
||
|
--- a/libsepol/cil/src/cil.c
|
||
|
+++ b/libsepol/cil/src/cil.c
|
||
|
@@ -54,7 +54,7 @@
|
||
|
|
||
|
int cil_sym_sizes[CIL_SYM_ARRAY_NUM][CIL_SYM_NUM] = {
|
||
|
{64, 64, 64, 1 << 13, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64},
|
||
|
- {64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64},
|
||
|
+ {8, 8, 8, 32, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1},
|
||
|
{1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1},
|
||
|
{1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1},
|
||
|
{1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1}
|
||
|
--
|
||
|
2.32.0
|
||
|
|