 |
Rule Set Based Access Control (RSBAC) for Linux - Benchmarks |
These Linux kernel compile benchmarks have been run on an Celeron-333 UP system with kernel 2.4.6 and RSBAC version 1.1.2-pre8. Three runs each of 'time make bzImage' on a 2.4.6 kernel source tree in single user mode after one untimed run produced the following average times in seconds:
| Kernel type | Total time | Kernel/Sys + User | Kernel/Sys time | User/Process time |
| Clean kernel | 711.75 | 711.74 | 34.83 | 676.91 |
| Maint kernel (no modules, no debug code) | 719.09 (+1.03%) | 719.09 (+1.03%) | 41.02 (+17.77%) | 678.07 (+0.17%) |
| Maint kernel (no modules) | 719.20 (+1.05%) | 719.19 (+1.05%) | 39.04 (+12.09%) | 680.15 (+0.48%) |
| RC + AUTH, no other options | 719.36 (+1.07%) | 719.35 (+1.07%) | 45.41 (+30.38%) | 673.94 (-0.44%) |
| AUTH + ACL, no other options | 721.18 (+1.32%) | 721.19 (+1.33%) | 44.56 (+27.94%) | 676.63 (-0.04%) |
| Default config: REG, FF, AUTH, RC, ACL modules, all log settings, but nothing logged | 729.33 (+2.47%) | 729.33 (+2.47%) | 52.76 (+51.48%) | 676.57 (-0.05%) |
| All options and models, except MS | 763.35 (+7.25%) | 763.07 (+7.21%) | 81.63 (+134.37%) | 681.44 (+0.67%) |
| All options and models | 854.69 (+20.08%) | 854.21 (+20.02%) | 169.65 (+387.08%) | 684.56 (+1.13%) |
The significant kernel time increase with all models is mostly due to the MS model with read check enabled, which marks all files ever read as scanned and thus produces a huge amount of attribute objects in large lists. The list handling will be optimized for 1.2.0.
These Linux kernel compile benchmarks have been run on an PIII-866 SMP Mylex Raid-5 system with kernel 2.4.3 and RSBAC version 1.1.1. Three runs each of 'time make bzImage -j 4' produced the following average times:
| Kernel type | Total time | Kernel/Sys + User | Kernel/Sys time | User/Process time |
| Clean kernel | 348.1s | 347.5s | 33.4s | 314.1s |
| RSBAC without modules (maint kernel) | 368.3s (+5.8%) | 368s (+5.9%) | 35.6s (+6.6%) | 332.4s (+5.8%) |
| RSBAC with default config: REG, FF, AUTH, RC, ACL modules, full log settings, but nothing logged | 372.6s (+7.0%) | 372.2s (+7.1%) | 36.4s (+9.0%) | 335.8s (+6.9%) |
These Linux kernel compile benchmarks have been run on a SuSE Linux 7.0 Pentium 100 system with kernel 2.2.18 and with RSBAC version 1.1.0. Three benchmark runs each, in single user mode right after boot, produced the following average times:
| Kernel type | Total time | Kernel + User | Kernel time | User/Process time |
| Clean kernel | 1858s | 1857s | 69s | 1788s |
| RSBAC without modules | 1884s (+1.3%) | 1877s (+1.1%) | 82s (+18.8%) | 1795s (+0.4%) |
| RSBAC with FF, AUTH, RC, ACL modules | 1967s (+5.9%) | 1959s (+5.5%) | 167s (+142%) | 1792s (+0.2%) |
27-Jul-01, -ao
Questions,
tips, etc.