{"push_id":565867019,"size":18,"distinct_size":18,"ref":"refs/heads/master","head":"98d497389bb1994d3b738ca5bf0dfeb6c685dd46","before":"b1bbd3030be095b5e5c49c6f899ed8071fb05f30","commits":[{"sha":"76ea9f898747bc11f27ad4598700e8f81cbc76e7","author":{"email":"8ff06164d6011c34cde672e44c421d6794d86d20@jolla.com","name":"John Brooks"},"message":"Build libsepol with -O2\n\nlibsepol contains performance sensitive code; in particular, compiler\noptimizations save a few minutes off of the optimized policydb hash\ntables.\n\nSigned-off-by: John Brooks <john.brooks@jolla.com>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/76ea9f898747bc11f27ad4598700e8f81cbc76e7"},{"sha":"798950e055e04cbea0464fb83cab406ee8d35154","author":{"email":"8ff06164d6011c34cde672e44c421d6794d86d20@jolla.com","name":"John Brooks"},"message":"Use a better hash function for libsepol's avtab\n\nThis function, based on murmurhash3, has much better distribution than\nthe original. Using the current default of 4096 buckets, there are many\nfewer collisions:\n\nBefore:\n2893000 entries and 4096/4096 buckets used, longest chain length 1649\nAfter:\n2732000 entries and 4096/4096 buckets used, longest chain length 764\n\nThe difference becomes much more significant when buckets are increased.\nA naive attempt to expand the current function to larger outputs doesn't\nyield any significant improvement; so this function is a prerequisite\nfor increasing the bucket size.\n\nSigned-off-by: John Brooks <john.brooks@jolla.com>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/798950e055e04cbea0464fb83cab406ee8d35154"},{"sha":"acb2a9beded6bd29471ffaa517316c0497f24e15","author":{"email":"8ff06164d6011c34cde672e44c421d6794d86d20@jolla.com","name":"John Brooks"},"message":"Tweak avtab hash table parameters for better performance\n\nUsing the Fedora 20 targeted policy, running check_assertions requires\nan avtab with around 22 million elements. With the default limit of 4096\nbuckets, performance is abysmal: it takes more than an hour to populate\nthe hash. Profiling shows most of that time under avtab_search_node.\n\nThis patch increases the hash from 13 to 20 bits and to a maximum of\n1048576 buckets. The time for check_assertions on that policy is reduced\nto about 3 minutes, which is enough to re-enable those checks as part of\nthe build process.\n\nA full size table will allocate 4-8 MB of memory, up from 16-32 KB. In a\ncursory review, these tables are usually short-lived and only 1-3 are\nallocated together. Compared to the cost of entries in this table (up to\n1 GB using the same policy), this isn't a significant increase.\n\nSigned-off-by: John Brooks <john.brooks@jolla.com>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/acb2a9beded6bd29471ffaa517316c0497f24e15"},{"sha":"1d71622a37dba8e54b27882327dbaa9872413ea9","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"Update libsepol ChangeLog.\n\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/1d71622a37dba8e54b27882327dbaa9872413ea9"},{"sha":"ed7a6ba24ad3241e696fa7bc9bb56bb4f373147b","author":{"email":"3d479b85ea8c465591772958e9b4342563a1d10a@google.com","name":"dcashman"},"message":"Allow libsepol C++ static library on device.\n\nChange-Id: I7da601767c3a4ebed7274e33304d8b589a9115fe\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/ed7a6ba24ad3241e696fa7bc9bb56bb4f373147b"},{"sha":"3f121151ca752c6a3e74cc6e9e9c8aa42e2e4af4","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"Update libsepol and checkpolicy ChangeLogs.\n\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/3f121151ca752c6a3e74cc6e9e9c8aa42e2e4af4"},{"sha":"c540479a3630b54837a6e4808a95cd322db1fc1c","author":{"email":"1cd2cba3b8945658213f6bb923bd9481c9e8d1fe@google.com","name":"Dan Albert"},"message":"Global C++11 compatibility.\n\nOur build system compiles flex/bison as C++ rather than C, but a few\nprojects add `-x c` to their flags, forcing the compiler to compile\nthem as C. This causes the compiler to reject the global C++ standard\nflag, so we need to explicitly provide a C standard flag to override\nit.\n\nBug: 18466763\nChange-Id: I49a6aeecf4abc563bd77127778b6d214e3851037\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/c540479a3630b54837a6e4808a95cd322db1fc1c"},{"sha":"37b7248edc2eda4176a430db48c30a5477af3d0b","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"Update checkpolicy ChangeLog.\n\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/37b7248edc2eda4176a430db48c30a5477af3d0b"},{"sha":"f0c9966f881211dcde89cfcad93f0360a71f959a","author":{"email":"6829a32725cbfa4b552457f514622e0416a9a91a@tresys.com","name":"Steve Lawrence"},"message":"Bump to final release","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/f0c9966f881211dcde89cfcad93f0360a71f959a"},{"sha":"2fa21cc840bce76274ba5d1b9ddbb0abebfaf06d","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"libselinux:  Only check SELinux enabled status once in selinux_check_access().\n\nMove the SELinux enabled check to the once handler so that we do\nnot perform this on each call to selinux_check_access().  Reduces\noverhead in both the SELinux-enabled and the SELinux-disabled cases.\n\nExtracted from the Android external/libselinux tree.\n\nChange-Id: I61fe85bc04fe53cbf840ba712c81bdb06e4e0c2f\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/2fa21cc840bce76274ba5d1b9ddbb0abebfaf06d"},{"sha":"eb0ba200b513d05d176e10a85061fdf01d0426f7","author":{"email":"1909bfd776bc2cd2d9a899cebe8317e7a729b473@tycho.ncsc.mil","name":"Robert Craig"},"message":"libselinux:  Adjustments to android property backend.\n\nAllow the android property backend parser to accept the\nSELABEL_OPT_VALIDATE option and to perform a validate\ncallback.\n\nExtracted from the Android external/libselinux tree.\n\nChange-Id: If061502c5e2489a1155798fac1d8357dbb8d13ba\nSigned-off-by: Robert Craig <rpcraig@tycho.ncsc.mil>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/eb0ba200b513d05d176e10a85061fdf01d0426f7"},{"sha":"14342674191ca11c4455ff7ac9b76b05173eb575","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"libselinux: pcre_study can return NULL without error.\n\nPer the man page, pcre_study can return NULL without error if\nit could not find any additional information.  Errors are indicated\nby the combination of a NULL return value and a non-NULL error string.\nFix the handling so that we do not incorrectly reject file_contexts\nentries.\n\nChange-Id: I2e7b7e01d85d96dd7fe78545d3ee3834281c4eba\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/14342674191ca11c4455ff7ac9b76b05173eb575"},{"sha":"4ef938a1842812e1111bd3079f33cdbad2d354bf","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"Note non-standard build dependencies.\n\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/4ef938a1842812e1111bd3079f33cdbad2d354bf"},{"sha":"eea6a900a6859c9fcc7ef0933bb0aafec6fa2b01","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"Enable building CIL in the host libsepol.\n\nEnable building CIL as part of the host libsepol.\nThis will allow using it for host-side policy tools.\nOmit it from the device libsepol used for the CTS for now,\nunless/until such a time as we find it necessary there.\n\nAlso build secilc, the CIL compiler.\n\nChange-Id: I2f04a720d9143a9c84fbab211511f76d82581b0b\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/eea6a900a6859c9fcc7ef0933bb0aafec6fa2b01"},{"sha":"54075fb3cda1a01c82eafc0858cfa63212ad6914","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"Update libselinux and libsepol ChangeLogs.\n\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/54075fb3cda1a01c82eafc0858cfa63212ad6914"},{"sha":"ee7bea53d7c6526e12fa084cb35b283205636d61","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"More build dependencies.\n\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/ee7bea53d7c6526e12fa084cb35b283205636d61"},{"sha":"00beeba1fcd5814d8f754acd39454f4e673f5a31","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"Maybe fix MacOS X build.\n\ns6_addr32 is not portable; use s6_addr instead.\n\nChange-Id: I21c237588d3e7200cefa3af96065f657dae4b1e7\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/00beeba1fcd5814d8f754acd39454f4e673f5a31"},{"sha":"98d497389bb1994d3b738ca5bf0dfeb6c685dd46","author":{"email":"d6e1285e1c84d3d5885c2124fdacc780e9fc0a94@tycho.nsa.gov","name":"Stephen Smalley"},"message":"Update libsepol ChangeLog.\n\nSigned-off-by: Stephen Smalley <sds@tycho.nsa.gov>","distinct":true,"url":"https://api.github.com/repos/bachradsusi/SELinuxProject-selinux/commits/98d497389bb1994d3b738ca5bf0dfeb6c685dd46"}]}