rsbacl5s.gif (2243 Byte)  

Rule Set Based Access Control (RSBAC) for Linux - Benchmarks


Benchmark results

2.4.6-UP-RSBAC-v1.1.2-pre8-Celeron-333-256MB

These Linux kernel compile benchmarks have been run on an Celeron-333 UP system with kernel 2.4.6 and RSBAC version 1.1.2-pre8. Three runs each of  'time make bzImage' on a 2.4.6 kernel source tree in single user mode after one untimed run produced the following average times in seconds:

Kernel type   Total time   Kernel/Sys + User  Kernel/Sys time   User/Process time
Clean kernel   711.75   711.74   34.83   676.91
Maint kernel (no modules, no debug code) 719.09 (+1.03%)   719.09 (+1.03%) 41.02 (+17.77%) 678.07 (+0.17%)
Maint kernel (no modules) 719.20 (+1.05%) 719.19 (+1.05%) 39.04 (+12.09%) 680.15 (+0.48%)
RC + AUTH, no other options 719.36 (+1.07%) 719.35 (+1.07%) 45.41 (+30.38%) 673.94 (-0.44%)
AUTH + ACL, no other options 721.18 (+1.32%) 721.19 (+1.33%) 44.56 (+27.94%) 676.63 (-0.04%)
Default config: REG, FF, AUTH, RC, ACL modules, all log settings, but nothing logged 729.33 (+2.47%) 729.33 (+2.47%) 52.76 (+51.48%) 676.57 (-0.05%)
All options and models, except MS 763.35 (+7.25%) 763.07 (+7.21%) 81.63 (+134.37%) 681.44 (+0.67%)
All options and models 854.69 (+20.08%) 854.21 (+20.02%) 169.65 (+387.08%) 684.56 (+1.13%)

The significant kernel time increase with all models is mostly due to the MS model with read check enabled, which marks all files ever read as scanned and thus produces a huge amount of attribute objects in large lists. The list handling will be optimized for 1.2.0.

2.4.3-SMP-RSBAC-v1.1.1-PIII-866-1GB-Raid-5

These Linux kernel compile benchmarks have been run on an PIII-866 SMP Mylex Raid-5 system with kernel 2.4.3 and RSBAC version 1.1.1. Three runs each of  'time make bzImage -j 4' produced the following average times:

Kernel type   Total time   Kernel/Sys + User  Kernel/Sys time   User/Process time
Clean kernel   348.1s   347.5s   33.4s   314.1s
RSBAC without modules (maint kernel) 368.3s (+5.8%)   368s (+5.9%)   35.6s (+6.6%)  332.4s (+5.8%)
RSBAC with default config: REG, FF, AUTH, RC, ACL modules, full log settings, but nothing logged 372.6s (+7.0%)   372.2s (+7.1%)   36.4s (+9.0%) 335.8s (+6.9%)

2.2.18-UP-RSBAC-v1.1.0-P-100-64MB

These Linux kernel compile benchmarks have been run on a SuSE Linux 7.0 Pentium 100 system with kernel 2.2.18 and with RSBAC version 1.1.0. Three benchmark runs each, in single user mode right after boot, produced the following average times:

Kernel type   Total time   Kernel + User  Kernel time   User/Process time
Clean kernel   1858s   1857s   69s   1788s
RSBAC without modules   1884s (+1.3%)   1877s (+1.1%)   82s (+18.8%)  1795s (+0.4%)
RSBAC with FF, AUTH, RC, ACL modules   1967s (+5.9%)   1959s (+5.5%)   167s (+142%) 1792s (+0.2%)

Questions, tips, etc.

27-Jul-01, -ao