[ 
https://issues.apache.org/jira/browse/FELIX-2640?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12918913#action_12918913
 ] 

Reto Bachmann-Gmür commented on FELIX-2640:
-------------------------------------------

I'm running with following bundles:

[   1] [Resolved   ] [    1] 
mvn:org.apache.clerezza/org.apache.clerezza.platform.security.conditions/0.5-incubating-SNAPSHOT
[   2] [Active     ] [    2] 
mvn:org.apache.clerezza/org.apache.clerezza.platform.security/0.8-incubating-SNAPSHOT
[   3] [Active     ] [    2] 
mvn:org.apache.felix/org.apache.felix.bundlerepository/1.6.4
[   4] [Active     ] [    2] 
mvn:org.apache.felix/org.apache.felix.configadmin/1.2.8
[   5] [Active     ] [    2] 
mvn:org.apache.felix/org.apache.felix.eventadmin/1.2.4
[   6] [Resolved   ] [    2] 
mvn:org.apache.felix/org.apache.felix.framework.security/1.4.0
[   7] [Active     ] [    2] mvn:org.apache.felix/org.apache.felix.main/3.0.3
[   8] [Active     ] [    2] 
mvn:org.apache.felix/org.apache.felix.metatype/1.0.4
[   9] [Active     ] [    2] mvn:org.apache.felix/org.apache.felix.scr/1.6.0
[  10] [Active     ] [    2] 
mvn:org.apache.felix/org.apache.felix.shell.tui/1.4.1
[  11] [Active     ] [    2] mvn:org.apache.felix/org.apache.felix.shell/1.4.2
[  12] [Active     ] [    2] 
mvn:org.apache.felix/org.apache.felix.webconsole/3.1.2

All but a few bundles have AllPermissions, these are set in the following:

http://svn.apache.org/viewvc/incubator/clerezza/trunk/org.apache.clerezza.parent/org.apache.clerezza.platform.security/src/main/java/org/apache/clerezza/platform/security/BundlePermissionManager.java?view=markup

Whenever a permission-check (via AccessController) is perfomed, it seems that a 
large amount of time is spent checking for the permission on the code-base 
(guessing from the method names).




> speed-up security checks
> ------------------------
>
>                 Key: FELIX-2640
>                 URL: https://issues.apache.org/jira/browse/FELIX-2640
>             Project: Felix
>          Issue Type: Improvement
>          Components: Framework Security
>            Reporter: Reto Bachmann-Gmür
>            Assignee: Karl Pauls
>         Attachments: hot-spots-acp-request.png
>
>
> Profiling Clerezza I found that a lot of time is spent in the implies method 
> of org.apache.felix.framework.BundleProtectionDomain. I'm wondering if this 
> could be made faster namely for Bundles that run with AllPermissions (as most 
> bundles do not have any restriction but only the user/subject).

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to