selinux: convert range transition list to a hashtab
authorStephen Smalley <sds@tycho.nsa.gov>
Thu, 7 Jan 2010 20:55:16 +0000 (15:55 -0500)
committerJames Morris <jmorris@namei.org>
Sun, 24 Jan 2010 21:29:05 +0000 (08:29 +1100)
commit2f3e82d694d3d7a2db019db1bb63385fbc1066f3
tree9d99a883eb2ab097a3ff1ee4e1c9bf2fa851d832
parent2457552d1e6f3183cd93f81c49a8da5fe8bb0e42
selinux: convert range transition list to a hashtab

Per https://bugzilla.redhat.com/show_bug.cgi?id=548145
there are sufficient range transition rules in modern (Fedora) policy to
make mls_compute_sid a significant factor on the shmem file setup path
due to the length of the range_tr list.  Replace the simple range_tr
list with a hashtab inside the security server to help mitigate this
problem.

Signed-off-by: Stephen D. Smalley <sds@tycho.nsa.gov>
Signed-off-by: James Morris <jmorris@namei.org>
security/selinux/ss/mls.c
security/selinux/ss/policydb.c
security/selinux/ss/policydb.h