• Huw Davies's avatar
    calipso: Add a label cache. · 4fee5242
    Huw Davies authored
    This works in exactly the same way as the CIPSO label cache.
    The idea is to allow the lsm to cache the result of a secattr
    lookup so that it doesn't need to perform the lookup for
    every skbuff.
    
    It introduces two sysctl controls:
     calipso_cache_enable - enables/disables the cache.
     calipso_cache_bucket_size - sets the size of a cache bucket.
    Signed-off-by: default avatarHuw Davies <huw@codeweavers.com>
    Signed-off-by: default avatarPaul Moore <paul@paul-moore.com>
    4fee5242
calipso.c 38.4 KB