Re: Now that SELinux supports booleans should we replace tunables with booleans?

On Wed, 14 Apr 2004, James Morris wrote:

> I think it's worse than this. It looks like we're using about 40 bytes of
> kernel memory for each rule, and with almost 300,000 rules, it's more like
> 12MB (for i386).

Actually it's 32 bytes per rule (I had slab debugging enabled, which uses a bit more), but still a lot. And on 64-bit, it's using twice as much memory.

• James -- James Morris <jmorris@redhat.com>

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.