RSBAC Handbook Releases
- 3.1.y
Patched kernels
Includes vanilla kernel with the RSBAC patch
- 3.1.5
Enhanced kernels
Combined patches with RSBAC and PaX, less well tested
GIT
RSBAC source code, can be unstable sometimes
Events
No events planned
1.3.2rc2
benchmarks made with:
- amd 64 3000+
- GCC 4.1.2
- no PaX
- standard services are running (no X, no server) after a fresh boot. rebooted after each test.
- Modules RC, AUTH and JAIL activated
- log user and program based disabled
- max list hash size is 1024
- All other options to default
Every test has been made 3 times and only best times were kept
rsbac-admin building
Protocol: make distclean;sync;time make build on rsbac-admin-1.3 repository.
2.6.19.3, cache enabled
| type | time (in seconds) |
|---|---|
| real | 34.967 |
| user | 30.606 |
| sys | 4.312 |
Profile: (Ticks spent, function name, tick/function_length ratio)
1 get_nr_files 0.0625
1 lookup_hash 0.0625
1 read_tsc 0.0625
1 rsbac_list_hash_pid 0.0625
2 unlink_file_vma 0.0625
4 adf_and_plus 0.0625
4 memcpy 0.0625
7 strncpy_from_user 0.0729
2 check_userspace 0.0800
3 up_read 0.0938
11 find_vma 0.0982
2 hash_fd_cache 0.1250
2 rsbac_list_hash_fd 0.1250
97 lookup_lol_item 0.1732
3 role_hash 0.1875
19 find_get_page 0.2969
41 __copy_to_user_ll 0.3203
3 ret_from_intr 0.4286
322 get_page_from_freelist 0.4375
946 default_idle 9.8542
Cache ratio: GEN 730 RC 595
2.6.19.3, cache disabled
| type | time (in seconds) |
|---|---|
| real | 34.884 |
| user | 30.542 |
| sys | 4.326 |
Profile: (Ticks spent, function name, tick/function_length ratio)
2 vfs_permission 0.0417
6 sysenter_past_esp 0.0496
30 lookup_item 0.0536
29 rsbac_ta_list_get_data_ttl 0.0604
2 fput 0.0625
2 rsbac_get_owner 0.0625
2 up_read 0.0625
3 page_add_file_rmap 0.0625
4 memcpy 0.0625
10 find_vma 0.0893
26 __d_lookup 0.1083
4 down_read_trylock 0.1250
19 lookup_device 0.1696
3 rsbac_list_hash_pid 0.1875
15 find_get_page 0.2344
4 rsbac_list_hash_fd 0.2500
324 get_page_from_freelist 0.4402
60 __copy_to_user_ll 0.4688
4 ret_from_intr 0.5714
1123 default_idle 11.6979
2.6.17.13
| type | time (in seconds) |
|---|---|
| real | 35.520 |
| user | 31.558 |
| sys | 3.960 |
dbench
Protocol: dbench -t 20 10 after 4 pre-warmup runs (including execute)
2.6.19.3, cache enabled
| media | speed (in Mb/s) |
|---|---|
| disk | 146 |
| ram | 176 |
Profile: (Ticks spent, function name, tick/function_length ratio)
Disk
142 rsbac_ta_list_get_data_ttl 0.2958
5 unlock_buffer 0.3125
22 cond_resched 0.3438
42 sysenter_past_esp 0.3471
28 kmem_cache_alloc 0.3500
31 bit_waitqueue 0.3875
25 current_kernel_time 0.3906
50 ext3_group_sparse 0.4464
8 hash_fd_cache 0.5000
285 lookup_lol_item 0.5089
10 role_hash 0.6250
10 rsbac_list_hash_fd 0.6250
72 lookup_device 0.6429
32 ext3_bg_has_super 0.6667
200 __copy_from_user_ll_nocache_nozero 0.6944
154 find_next_zero_bit 0.8370
56 find_get_page 0.8750
15 rsbac_list_hash_pid 0.9375
392 __copy_to_user_ll 3.0625
3433 default_idle 35.7604
Ram
36 find_lock_page 0.2812
10 rsbac_get_owner 0.3125
178 lookup_lol_item 0.3179
31 strncpy_from_user 0.3229
11 _atomic_dec_and_lock 0.3438
258 get_page_from_freelist 0.3505
31 kmem_cache_alloc 0.3875
241 lookup_item 0.4304
112 __d_lookup 0.4667
30 adf_and_plus 0.4688
58 sysenter_past_esp 0.4793
29 __wake_up_bit 0.6042
294 rsbac_ta_list_get_data_ttl 0.6125
10 rsbac_list_hash_pid 0.6250
259 rsbac_get_parent 0.7358
318 __copy_from_user_ll 1.1691
19 rsbac_list_hash_fd 1.1875
240 lookup_device 2.1429
254 default_idle 2.6458
541 __copy_to_user_ll 4.2266
rsbac_get_parent calls: 78560533
| FD Cache | hits | misses | items | subitem | hm-ratio |
|---|---|---|---|---|---|
| GEN | 47350358 | 272573 | 4873 | 4873 | 173 |
| RC | 49905273 | 273887 | 5529 | 6187 | 182 |
2.6.19, cache disabled
| media | speed (in Mb/s) |
|---|---|
| disk | 136 |
| ram | 176 |
Profile: (Ticks spent, function name, tick/function_length ratio)
Disk
44 find_next_zero_bit 0.2391
59 __d_lookup 0.2458
8 rsbac_get_owner 0.2500
25 strncpy_from_user 0.2604
26 kmem_cache_alloc 0.3250
40 sysenter_past_esp 0.3306
23 cond_resched 0.3594
25 adf_and_plus 0.3906
56 ext3_group_sparse 0.5000
182 rsbac_get_parent 0.5170
275 rsbac_ta_list_get_data_ttl 0.5729
37 find_get_page 0.5781
28 ext3_bg_has_super 0.5833
10 rsbac_list_hash_pid 0.6250
351 lookup_item 0.6268
192 __copy_from_user_ll_nocache_nozero 0.6667
147 lookup_device 1.3125
27 rsbac_list_hash_fd 1.6875
390 __copy_to_user_ll 3.0469
3016 default_idle 31.4167
Ram
26 strncpy_from_user 0.2708
41 find_lock_page 0.3203
26 kmem_cache_alloc 0.3250
246 get_page_from_freelist 0.3342
11 rsbac_get_owner 0.3438
19 __wake_up_bit 0.3958
26 adf_and_plus 0.4062
234 lookup_item 0.4179
14 _atomic_dec_and_lock 0.4375
8 role_hash 0.5000
63 sysenter_past_esp 0.5207
126 __d_lookup 0.5250
296 rsbac_ta_list_get_data_ttl 0.6167
276 rsbac_get_parent 0.7841
17 rsbac_list_hash_pid 1.0625
311 __copy_from_user_ll 1.1434
24 rsbac_list_hash_fd 1.5000
194 lookup_device 1.7321
340 default_idle 3.5417
531 __copy_to_user_ll 4.1484
2.6.17.13
| media | speed (in Mb/s) |
|---|---|
| disk | 205 |
| ram | 290 |