[PATCH] evm: stop avoidably reading i_writecount in evm_file_release

Mimi Zohar zohar at linux.ibm.com
Thu Oct 10 03:00:00 UTC 2024


On Tue, 2024-08-06 at 15:36 +0200, Mateusz Guzik wrote:
> The EVM_NEW_FILE flag is unset if the file already existed at the time
> of open and this can be checked without looking at i_writecount.
> 
> Not accessing it reduces traffic on the cacheline during parallel open
> of the same file and drop the evm_file_release routine from second place
> to bottom of the profile.
> 
> Signed-off-by: Mateusz Guzik <mjguzik at gmail.com>

Sorry for the delay.  It's now queued in next-integrity.

thanks,

Mimi





More information about the Linux-security-module-archive mailing list