Comment 3 for bug 75602

Revision history for this message
In , Hp-pobox (hp-pobox) wrote :

There is a patch in CVS now that allows you to build in a mode where groups
aren't cached. The problem is that if you're using the read-/etc-group libc
implementation instead of nscd this will be absurdly performance-intensive.
That is, every time someone sends a message over the bus we'd load and
parse /etc/group and /etc/passwd.

What we'd like someone to do is write a small test program to benchmark group-
based bus security policy checks with and without caching the user/group
information, and then run that benchmark
a) with current caching
b) with regular "read the file" libc implementation
c) with nscd implementation

Then we can discuss the right course of action.

More discussion can be found in the mailing list archives.