You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@felix.apache.org by "Reto Bachmann-Gmür (JIRA)" <ji...@apache.org> on 2010/10/07 09:16:30 UTC
[jira] Created: (FELIX-2640) speed-up security checks
speed-up security checks
------------------------
Key: FELIX-2640
URL: https://issues.apache.org/jira/browse/FELIX-2640
Project: Felix
Issue Type: Improvement
Components: Framework Security
Reporter: Reto Bachmann-Gmür
Profiling Clerezza I found that a lot of time is spent in the implies method of org.apache.felix.framework.BundleProtectionDomain. I'm wondering if this could be made faster namely for Bundles that run with AllPermissions (as most bundles do not have any restriction but only the user/subject).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (FELIX-2640) speed-up security checks
Posted by "Reto Bachmann-Gmür (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/FELIX-2640?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Reto Bachmann-Gmür updated FELIX-2640:
--------------------------------------
Attachment: hot-spots-acp-request.png
Netbeans profiling shows quite some time is spend in various felix-security methods, in the profiling sceneraio all bundles rund with all permissions
> speed-up security checks
> ------------------------
>
> Key: FELIX-2640
> URL: https://issues.apache.org/jira/browse/FELIX-2640
> Project: Felix
> Issue Type: Improvement
> Components: Framework Security
> Reporter: Reto Bachmann-Gmür
> Attachments: hot-spots-acp-request.png
>
>
> Profiling Clerezza I found that a lot of time is spent in the implies method of org.apache.felix.framework.BundleProtectionDomain. I'm wondering if this could be made faster namely for Bundles that run with AllPermissions (as most bundles do not have any restriction but only the user/subject).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (FELIX-2640) speed-up security checks
Posted by "Reto Bachmann-Gmür (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/FELIX-2640?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12918913#action_12918913 ]
Reto Bachmann-Gmür commented on FELIX-2640:
-------------------------------------------
I'm running with following bundles:
[ 1] [Resolved ] [ 1] mvn:org.apache.clerezza/org.apache.clerezza.platform.security.conditions/0.5-incubating-SNAPSHOT
[ 2] [Active ] [ 2] mvn:org.apache.clerezza/org.apache.clerezza.platform.security/0.8-incubating-SNAPSHOT
[ 3] [Active ] [ 2] mvn:org.apache.felix/org.apache.felix.bundlerepository/1.6.4
[ 4] [Active ] [ 2] mvn:org.apache.felix/org.apache.felix.configadmin/1.2.8
[ 5] [Active ] [ 2] mvn:org.apache.felix/org.apache.felix.eventadmin/1.2.4
[ 6] [Resolved ] [ 2] mvn:org.apache.felix/org.apache.felix.framework.security/1.4.0
[ 7] [Active ] [ 2] mvn:org.apache.felix/org.apache.felix.main/3.0.3
[ 8] [Active ] [ 2] mvn:org.apache.felix/org.apache.felix.metatype/1.0.4
[ 9] [Active ] [ 2] mvn:org.apache.felix/org.apache.felix.scr/1.6.0
[ 10] [Active ] [ 2] mvn:org.apache.felix/org.apache.felix.shell.tui/1.4.1
[ 11] [Active ] [ 2] mvn:org.apache.felix/org.apache.felix.shell/1.4.2
[ 12] [Active ] [ 2] mvn:org.apache.felix/org.apache.felix.webconsole/3.1.2
All but a few bundles have AllPermissions, these are set in the following:
http://svn.apache.org/viewvc/incubator/clerezza/trunk/org.apache.clerezza.parent/org.apache.clerezza.platform.security/src/main/java/org/apache/clerezza/platform/security/BundlePermissionManager.java?view=markup
Whenever a permission-check (via AccessController) is perfomed, it seems that a large amount of time is spent checking for the permission on the code-base (guessing from the method names).
> speed-up security checks
> ------------------------
>
> Key: FELIX-2640
> URL: https://issues.apache.org/jira/browse/FELIX-2640
> Project: Felix
> Issue Type: Improvement
> Components: Framework Security
> Reporter: Reto Bachmann-Gmür
> Assignee: Karl Pauls
> Attachments: hot-spots-acp-request.png
>
>
> Profiling Clerezza I found that a lot of time is spent in the implies method of org.apache.felix.framework.BundleProtectionDomain. I'm wondering if this could be made faster namely for Bundles that run with AllPermissions (as most bundles do not have any restriction but only the user/subject).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Assigned: (FELIX-2640) speed-up security checks
Posted by "Karl Pauls (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/FELIX-2640?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Karl Pauls reassigned FELIX-2640:
---------------------------------
Assignee: Karl Pauls
> speed-up security checks
> ------------------------
>
> Key: FELIX-2640
> URL: https://issues.apache.org/jira/browse/FELIX-2640
> Project: Felix
> Issue Type: Improvement
> Components: Framework Security
> Reporter: Reto Bachmann-Gmür
> Assignee: Karl Pauls
> Attachments: hot-spots-acp-request.png
>
>
> Profiling Clerezza I found that a lot of time is spent in the implies method of org.apache.felix.framework.BundleProtectionDomain. I'm wondering if this could be made faster namely for Bundles that run with AllPermissions (as most bundles do not have any restriction but only the user/subject).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (FELIX-2640) speed-up security checks
Posted by "Karl Pauls (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/FELIX-2640?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12918804#action_12918804 ]
Karl Pauls commented on FELIX-2640:
-----------------------------------
Can you provide me with your set-up or with pointers how i can quickly recreate the case you are profiling?
> speed-up security checks
> ------------------------
>
> Key: FELIX-2640
> URL: https://issues.apache.org/jira/browse/FELIX-2640
> Project: Felix
> Issue Type: Improvement
> Components: Framework Security
> Reporter: Reto Bachmann-Gmür
> Assignee: Karl Pauls
> Attachments: hot-spots-acp-request.png
>
>
> Profiling Clerezza I found that a lot of time is spent in the implies method of org.apache.felix.framework.BundleProtectionDomain. I'm wondering if this could be made faster namely for Bundles that run with AllPermissions (as most bundles do not have any restriction but only the user/subject).
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.