Date: Tue, 17 Apr 2012 22:57:09 +0200 From: =?iso-8859-2?Q?Edward_Tomasz_Napiera=B3a?= <trasz@FreeBSD.org> To: Adrian Chadd <adrian@freebsd.org> Cc: Garrett Cooper <yanegomi@gmail.com>, Richard Kojedzinszky <krichy@tvnetwork.hu>, freebsd-security@freebsd.org, Current FreeBSD <freebsd-current@freebsd.org>, freebsd-performance@freebsd.org, "O. Hartmann" <ohartman@zedat.fu-berlin.de> Subject: Re: ufs multilabel performance (fwd) Message-ID: <3BFCE7F6-8C67-4BEA-AF13-712A83430002@FreeBSD.org> In-Reply-To: <CAJ-VmonLzCPfO7DPW=Wj4FDpbfvw2=C=4skfBD8R=pcVrakq-g@mail.gmail.com> References: <alpine.DEB.2.02.1204142134050.8001@krichy.tvnetwork.hu> <4F8AAEF7.3090800@zedat.fu-berlin.de> <alpine.DEB.2.02.1204151555080.12537@krichy.tvnetwork.hu> <4F8B21D2.4080008@zedat.fu-berlin.de> <951B1A8C-A216-420A-BA17-316B8D9C2B0E@gmail.com> <4F8B2CC4.5030601@zedat.fu-berlin.de> <28768C15-C694-4C09-8CD1-3F5412554B55@gmail.com> <alpine.DEB.2.02.1204170825450.30571@krichy.tvnetwork.hu> <CAJ-VmonLzCPfO7DPW=Wj4FDpbfvw2=C=4skfBD8R=pcVrakq-g@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Wiadomo=B6=E6 napisana przez Adrian Chadd w dniu 17 kwi 2012, o godz. = 21:17: > On 16 April 2012 23:31, Richard Kojedzinszky <krichy@tvnetwork.hu> = wrote: >>=20 >> So now reactions here, creating files with multilabel is still slow. >>=20 >> I would like to use multilabel access control on my /tmp, for = example, my >> web server places it's session files there in a subdirectory. Of = course, I >> would like to assign a label for that subdir, but with this slow file >> creation, that is not the way to go. I may then use a different = filesystem >> for that. In this case, can I assign a root mac label for a mount = point? >=20 > Hi, >=20 > This is a perfect job for hwpmc / dtrace. >=20 > Would you be able to load up either of those and get some CPU usage > statistics whilst you're running your benchmark? >=20 > It's either that, or it's (massive) locking contention. Or disk I/O. MAC labels, just like ACLs, are stored in extended = attributes, and I remember something about writing those being synchronous. --=20 If you cut off my head, what would I say? Me and my head, or me and my = body?
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3BFCE7F6-8C67-4BEA-AF13-712A83430002>