avc_cache_stats(3) SELinux API documentation avc_cache_stats(3)
NAME
avc_cache_stats, avc_av_stats, avc_sid_stats - obtain userspace SELinux
AVC statistics
SYNOPSIS
#include <selinux/selinux.h>
#include <selinux/avc.h>
void avc_av_stats(void);
void avc_sid_stats(void);
void avc_cache_stats(struct avc_cache_stats *stats);
DESCRIPTION
The userspace AVC maintains two internal hash tables, one to store se-
curity ID's and one to cache access decisions.
avc_av_stats() and avc_sid_stats() produce log messages indicating the
status of the access decision and SID tables, respectively. The mes-
sages contain the number of entries in the table, number of hash buck-
ets and number of buckets used, and maximum number of entries in a sin-
gle bucket.
avc_cache_stats() populates a structure whose fields reflect cache ac-
tivity:
struct avc_cache_stats {
unsigned entry_lookups;
unsigned entry_hits;
unsigned entry_misses;
unsigned entry_discards;
unsigned cav_lookups;
unsigned cav_hits;
unsigned cav_probes;
unsigned cav_misses;
};
entry_lookups
Number of queries made.
entry_hits
Number of times a decision was found in the aeref argument.
entry_misses
Number of times a decision was not found in the aeref argument.
entry_discards
Number of times a decision was not found in the aeref argument
and the aeref argument was non-NULL.
cav_lookups
Number of cache lookups.
cav_hits
Number of cache hits.
cav_misses
Number of cache misses.
cav_probes
Number of entries examined while searching the cache.
NOTES
When the cache is flushed as a result of a call to avc_reset() or a
policy change notification, the statistics returned by
avc_cache_stats() are reset to zero. The SID table, however, is left
unchanged.
When a policy change notification is received, a call to avc_av_stats()
is made before the cache is flushed.
AUTHOR
Eamon Walsh <ewalsh@tycho.nsa.gov>
SEE ALSO
avc_init(3), avc_has_perm(3), avc_context_to_sid(3),
avc_add_callback(3), selinux(8)
27 May 2004 avc_cache_stats(3)
Generated by dwww version 1.14 on Fri Jan 24 06:14:26 CET 2025.