[apparmor] Patch 0/11] various dfa improvements

[Kees Cook]

Hi,

On Mon, Oct 18, 2010 at 05:20:32PM -0700, John Johansen wrote:
> This set of patches applies on top of the previous (yet uncommitted) patch
> and provide further enhancements to dfa creation.  They don't significantly
> affect peak memory consumption but they do result in faster compilation
> and smaller dfas.
> ...
> 2.5.1 gets
> real	0m30.202s
> ...
> with the full set of patches applied
> real	0m17.469s

I don't know the DFA code well enough to say yes or no, but this seems
extremely good. :P I would say, barring a NACK in the next few days, put it
in the tree.

-Kees

-- 
Kees Cook
Ubuntu Security Team