From 628ff29b2015baf543cafec3ee930e2088964bd0 Mon Sep 17 00:00:00 2001 From: luhuaxin <1539327763@qq.com> Date: Wed, 2 Jun 2021 16:27:29 +0800 Subject: [PATCH] do malloc trim after load policy --- do-malloc-trim-after-load-policy.patch | 35 ++++++++++++++++++++++++++ libselinux.spec | 6 ++++- 2 files changed, 40 insertions(+), 1 deletion(-) create mode 100644 do-malloc-trim-after-load-policy.patch diff --git a/do-malloc-trim-after-load-policy.patch b/do-malloc-trim-after-load-policy.patch new file mode 100644 index 0000000..a69d44f --- /dev/null +++ b/do-malloc-trim-after-load-policy.patch @@ -0,0 +1,35 @@ +From 3d5049f849226d54070651fdf96019d263c38363 Mon Sep 17 00:00:00 2001 +From: luhuaxin <1539327763@qq.com> +Date: Wed, 2 Jun 2021 16:24:47 +0800 +Subject: [PATCH] do malloc trim after load policy + +--- + libselinux/src/load_policy.c | 5 ++++- + 1 file changed, 4 insertions(+), 1 deletion(-) + +diff --git a/libselinux/src/load_policy.c b/libselinux/src/load_policy.c +index 2aea826..ace898c 100644 +--- a/libselinux/src/load_policy.c ++++ b/libselinux/src/load_policy.c +@@ -18,6 +18,7 @@ + #include + #include "policy.h" + #include ++#include + + #ifndef MNT_DETACH + #define MNT_DETACH 2 +@@ -365,7 +366,9 @@ int selinux_init_load_policy(int *enforce) + } + + /* Load the policy. */ +- return selinux_mkload_policy(0); ++ rc = selinux_mkload_policy(0); ++ malloc_trim(0); ++ return rc; + + noload: + /* +-- +1.8.3.1 + diff --git a/libselinux.spec b/libselinux.spec index 0dd180d..a527bab 100644 --- a/libselinux.spec +++ b/libselinux.spec @@ -3,13 +3,14 @@ Name: libselinux Version: 3.1 -Release: 2 +Release: 3 License: Public Domain Summary: SELinux library and simple utilities Url: https://github.com/SELinuxProject/selinux/wiki Source0: https://github.com/SELinuxProject/selinux/releases/download/20200710/libselinux-3.1.tar.gz #Patch0: libselinux-Use-Python-distutils-to-install-SELinux-p.patch +Patch1: do-malloc-trim-after-load-policy.patch BuildRequires: gcc python3-devel systemd swig pcre2-devel xz-devel BuildRequires: ruby-devel libsepol-static @@ -128,6 +129,9 @@ mv %{buildroot}%{_sbindir}/getconlist %{buildroot}%{_sbindir}/selinuxconlist %{_mandir}/ru/man8/* %changelog +* Wed Jul 2 2021 luhuaxin <1539327763@qq.com> - 3.1-3 +- do malloc trim after load policy + * Tue Oct 27 2020 gaoyusong - 3.1-2 - delete BuildRequires python2-devel -- Gitee