Commit 5b5b6feb authored by Paul Moore's avatar Paul Moore Committed by Stephen Smalley
Browse files

selinux: reduce the number of calls to synchronize_net() when flushing caches



commit 615e51fd upstream.

When flushing the AVC, such as during a policy load, the various
network caches are also flushed, with each making a call to
synchronize_net() which has shown to be expensive in some cases.
This patch consolidates the network cache flushes into a single AVC
callback which only calls synchronize_net() once for each AVC cache
flush.

Change-Id: I2a7f020748d1adf2b68246f6ef86d0c871adffb7
Reported-by: default avatarJaejyn Shin <flagon22bass@gmail.com>
Signed-off-by: default avatarPaul Moore <pmoore@redhat.com>
parent 2294d499
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment