avc_cache_stats man page on YellowDog

Man page or keyword search:  
man Server   18644 pages
apropos Keyword Search (all sections)
Output format
YellowDog logo
[printable version]

avc_cache_stats(3)	   SELinux API documentation	    avc_cache_stats(3)

NAME
       avc_cache_stats, avc_av_stats, avc_sid_stats - obtain userspace SELinux
       AVC statistics.

SYNOPSIS
       #include <selinux/selinux.h>

       #include <selinux/avc.h>

       void avc_av_stats(void);

       void avc_sid_stats(void);

       void avc_cache_stats(struct avc_cache_stats *stats);

DESCRIPTION
       The userspace AVC maintains two internal	 hash  tables,	one  to	 store
       security ID's and one to cache access decisions.

       avc_av_stats and avc_sid_stats produce log messages indicating the sta‐
       tus of the access decision and SID tables, respectively.	 The  messages
       contain	the number of entries in the table, number of hash buckets and
       number of buckets used, and maximum  number  of	entries	 in  a	single
       bucket.

       avc_cache_stats populates a structure whose fields reflect cache activ‐
       ity:

	      struct avc_cache_stats {
		  unsigned  entry_lookups;
		  unsigned  entry_hits;
		  unsigned  entry_misses;
		  unsigned  entry_discards;
		  unsigned  cav_lookups;
		  unsigned  cav_hits;
		  unsigned  cav_probes;
		  unsigned  cav_misses;
	      };

       entry_lookups
	      Number of queries made.

       entry_hits
	      Number of times a decision was found in the aeref argument.

       entry_misses
	      Number of times a decision was not found in the aeref argument.

       entry_discards
	      Number of times a decision was not found in the  aeref  argument
	      and the aeref argument was non-NULL.

       cav_lookups
	      Number of cache lookups.

       cav_hits
	      Number of cache hits.

       cav_misses
	      Number of cache misses.

       cav_probes
	      Number of entries examined while searching the cache.

NOTES
       When  the cache is flushed as a result of a call to avc_reset or a pol‐
       icy change notification, the statistics returned by avc_cache_stats are
       reset to zero.  The SID table, however, is left unchanged.

       When  a	policy change notification is received, a call to avc_av_stats
       is made before the cache is flushed.

AUTHOR
       Eamon Walsh <ewalsh@tycho.nsa.gov>

SEE ALSO
       avc_init(3),  avc_has_perm(3),	avc_context_to_sid(3),	 avc_add_call‐
       back(3) selinux(8)

				  27 May 2004		    avc_cache_stats(3)
[top]

List of man pages available for YellowDog

Copyright (c) for man pages and the logo by the respective OS vendor.

For those who want to learn more, the polarhome community provides shell access and support.

[legal] [privacy] [GNU] [policy] [cookies] [netiquette] [sponsors] [FAQ]
Tweet
Polarhome, production since 1999.
Member of Polarhome portal.
Based on Fawad Halim's script.
....................................................................
Vote for polarhome
Free Shell Accounts :: the biggest list on the net