Re: [PATCH] ubifs: add CONFIG_UBIFS_FS_SECURITY to disable/enable security labels

From: Richard Weinberger
Date: Fri Mar 03 2017 - 03:58:27 EST


Hyunchul Lee,

Am 03.03.2017 um 08:44 schrieb Hyunchul Lee:
> From: Hyunchul Lee <cheol.lee@xxxxxxx>
>
> When write syscall is called, every time security label is searched to
> determine that file's privileges should be changed.
> If LSM(Linux Security Model) is not used, this is useless.
>
> So introduce CONFIG_UBIFS_SECURITY to disable security labels. it's default
> value is "y".

Can you please explain what the benefit is and why UBIFS needs this (and why not
all other filesystems)?
I guess some performance issue, do you have numbers?

Thanks,
//richard