tree 6b79290fc0dbeffe30945235ca86576b652c84dd
parent 2e532b702834c07f614caf4489feb691e713232a
author Huw Davies <huw@codeweavers.com> 1467054377 -0400
committer Paul Moore <paul@paul-moore.com> 1467054377 -0400

calipso: Add a label cache.

This works in exactly the same way as the CIPSO label cache.
The idea is to allow the lsm to cache the result of a secattr
lookup so that it doesn't need to perform the lookup for
every skbuff.

It introduces two sysctl controls:
 calipso_cache_enable - enables/disables the cache.
 calipso_cache_bucket_size - sets the size of a cache bucket.

Signed-off-by: Huw Davies <huw@codeweavers.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>