On Thu, 2026-03-19 at 14:31 -0700, steven chen wrote:

> > - Support for deleting N measurement records (and pre-pending the remaining
> > measurement records)
> 
> Is there any problem to bring work of "stage" step together to the 
> deletion step?
> 
> "Trim N" method does everything that "staged" method can do, right? 
> what's the "stage" method can do but "trim N" method can't do?
> 
> in user space, if in "staged" state, no other user space agent can 
> access the IMA measure list, right?
> 
> Could you explain the benefit of bringing the "stage" step?

The performance improvement is because "staging" the IMA measurement list takes
the lock in order to move the measurement list pointer and then releases it. 
New measurements can then be appended to a new measurement list.  Deleting
records is done without taking the lock to walk the staged measurement list.

Without staging the measurement list, walking the measurement list to trim N
records requires taking and holding the lock.  The performance is dependent on
the size of the measurement list.

Your question isn't really about "staging" the measurement list records, but
requiring a userspace signal to delete them.  To answer that question, deleting
N records (third patch) could imply staging all the measurement records and
immediately deleting N records without an explicit userspace signal.

I expect the requested "documentation" patch will provide the motivation for the
delayed deletion of the measurement list.

Mimi 











Reply via email to