linux-kernel - Re: ima: use of radix tree cache indexing == massive waste of memory?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <C8E20010.1965B%ryan.r.ware@intel.com>
Date:	Mon, 18 Oct 2010 14:50:22 -0600
From:	"Ware, Ryan R" <ryan.r.ware@...el.com>
To:	Mimi Zohar <zohar@...ux.vnet.ibm.com>,
	Dave Chinner <david@...morbit.com>
CC:	Andrew Morton <akpm@...ux-foundation.org>,
	Kyle McMartin <kyle@...artin.ca>,
	James Morris <jmorris@...ei.org>,
	Christoph Hellwig <hch@...radead.org>,
	"kernel@...ts.fedoraproject.org" <kernel@...ts.fedoraproject.org>,
	Mimi Zohar <zohar@...ibm.com>,
	"warthog9@...nel.org" <warthog9@...nel.org>,
	"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
	"H. Peter Anvin" <hpa@...or.com>, Serge Hallyn <serue@...ibm.com>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	"mingo@...e.hu" <mingo@...e.hu>
Subject: Re: ima: use of radix tree cache indexing == massive waste of
 memory?

On 10/18/10 6:31 AM, "Mimi Zohar" <zohar@...ux.vnet.ibm.com> wrote:

>On Mon, 2010-10-18 at 20:29 +1100, Dave Chinner wrote:
>> On Sun, Oct 17, 2010 at 11:36:20PM -0700, Andrew Morton wrote:
>> > On Mon, 18 Oct 2010 02:25:30 -0400 Kyle McMartin <kyle@...artin.ca>
>>wrote:
>> > 
>> > > Subject: [PATCH] ima: allow it to be completely disabled (and
>>default to off)
>> > 
>> > Good enough as a short-term thing I guess.
>> > 
>> > But the memory consumption which David described is plain nuttiness
>>and
>> > needs to be fixed, presumably by using a more appropriate data
>>structure
>> > for lookups.
>> > 
>> > However unless I missed it, nobody has yet stated that they intend to
>> > fix this?
>> 
>> I think Eric said he is going to look at it.
>> 
>> Cheers,
>> 
>> Dave.
>
>Am looking at it as well.
>
>Mimi

I'll help look into this aspect too.

To be clear (since my first post seemed to go to the moderator), we will
be using this starting with MeeGo 1.2.  Yes, this rather pigish memory
usage needs to be addressed.  Let's focus on fixing that.  I'd say there
are a number of options we can explore here to do that.

It's already upstream and in the appropriate place as far as I'm
concerned.  Let's not chuck it out because on second blush there were
faults that no one expected.

Ryan

Download attachment "smime.p7s" of type "application/pkcs7-signature" (5105 bytes)