✏️ 编辑：plugin_selinux.cpython-39.opt-1.pyc
路径：
/usr/lib/python3.9/site-packages/tuned/plugins/__pycache__/plugin_selinux.cpython-39.opt-1.pyc
大小：3.06 KB · 修改：2026-07-21 16:54:01 · 权限：0644 · 只读（保存会失败）
← 返回目录
👁 查看
⬇ 下载
检测到二进制内容，直接保存可能损坏文件。请改用「上传替换」。
a �]�i � @ sd d dl Z d dlZddlmZ ddlT d dlZd dlmZ d dl m Z ej � � Z G dd� dej�ZdS ) � N� )�base)�*)� exceptions)�commandsc sh e Zd ZdZedd� �Z� fdd�Zedd� �Zdd � Zd d � Z e d �d d� �Z e d �dd� �Z � ZS )� SelinuxPlugina� Plug-in for tuning SELinux options. SELinux decisions, such as allowing or denying access, are cached. This cache is known as the Access Vector Cache (AVC). When using these cached decisions, SELinux policy rules need to be checked less, which increases performance. The [option]`avc_cache_threshold` option allows adjusting the maximum number of AVC entries. NOTE: Prior to changing the default value, evaluate the system performance with care. Increasing the value could potentially decrease the performance by making AVC slow. .Increase the AVC cache threshold for hosts with containers. ==== ---- [selinux] avc_cache_threshold=8192 ---- ==== c C s( d}t j�|�s$d}t j�|�s$d }|S )Nz/sys/fs/selinuxz/selinux)�os�path�exists)�selfr � r �@/usr/lib/python3.9/site-packages/tuned/plugins/plugin_selinux.py�_get_selinux_path" s z SelinuxPlugin._get_selinux_pathc sT t � | _| �� | _| jd u r&t�d��tj�| jdd�| _ t t | �j |i |�� d S )NzFSELinux is not enabled on your system or incompatible version is used.ZavcZcache_threshold) r �_cmdr Z _selinux_pathr ZNotSupportedPluginExceptionr r �join�_cache_threshold_path�superr �__init__)r �args�kwargs�� __class__r r r + s zSelinuxPlugin.__init__c C s dd iS )N�avc_cache_thresholdr )r r r r �_get_config_options3 s �z!SelinuxPlugin._get_config_optionsc C s d|_ d|_d S )NTF)Z_has_static_tuningZ_has_dynamic_tuning�r �instancer r r �_instance_init9 s z SelinuxPlugin._instance_initc C s d S )Nr r r r r �_instance_cleanup= s z SelinuxPlugin._instance_cleanupr c C sL |d u r d S t |�}|dkrD|s@| jj| j||r8tjgndd� |S d S d S )Nr F)Zno_error)�intr Z write_to_filer �errno�ENOENT)r �valuer Zsim�removeZ thresholdr r r �_set_avc_cache_threshold@ s �z&SelinuxPlugin._set_avc_cache_thresholdc C s& | j �| j�}t|�dkr"t|�S d S )Nr )r Z read_filer �lenr )r r r! r r r �_get_avc_cache_thresholdM s z&SelinuxPlugin._get_avc_cache_threshold)�__name__� __module__� __qualname__�__doc__� classmethodr r r r r Z command_setr# Z command_getr% � __classcell__r r r r r s r )r r � r Z decoratorsZ tuned.logsZtunedZ tuned.pluginsr Ztuned.utils.commandsr Zlogs�get�logZPluginr r r r r �<module> s
💾 保存
取消
保存为 UTF-8，换行统一为 LF