Re: ima: use of radix tree cache indexing == massive waste ofmemory?

From: Ware, Ryan R
Date: Mon Oct 18 2010 - 16:50:52 EST


On 10/18/10 6:31 AM, "Mimi Zohar" <zohar@xxxxxxxxxxxxxxxxxx> wrote:

>On Mon, 2010-10-18 at 20:29 +1100, Dave Chinner wrote:
>> On Sun, Oct 17, 2010 at 11:36:20PM -0700, Andrew Morton wrote:
>> > On Mon, 18 Oct 2010 02:25:30 -0400 Kyle McMartin <kyle@xxxxxxxxxxx>
>>wrote:
>> >
>> > > Subject: [PATCH] ima: allow it to be completely disabled (and
>>default to off)
>> >
>> > Good enough as a short-term thing I guess.
>> >
>> > But the memory consumption which David described is plain nuttiness
>>and
>> > needs to be fixed, presumably by using a more appropriate data
>>structure
>> > for lookups.
>> >
>> > However unless I missed it, nobody has yet stated that they intend to
>> > fix this?
>>
>> I think Eric said he is going to look at it.
>>
>> Cheers,
>>
>> Dave.
>
>Am looking at it as well.
>
>Mimi

I'll help look into this aspect too.

To be clear (since my first post seemed to go to the moderator), we will
be using this starting with MeeGo 1.2. Yes, this rather pigish memory
usage needs to be addressed. Let's focus on fixing that. I'd say there
are a number of options we can explore here to do that.

It's already upstream and in the appropriate place as far as I'm
concerned. Let's not chuck it out because on second blush there were
faults that no one expected.

Ryan

Attachment: smime.p7s
Description: S/MIME cryptographic signature