LSMPMON Read Me

1. What is this?

This is the performance monitor of the Linux Security Modules (LSM).

This is the LSMPMON with SystemCall Ver.0.1 supported context switch.
When a context switch occurs, LSMPMON will not save the processing time
and not add to the number of calls (count).
The number of times a context switch occurs, is counted as cs_count.

Copy the patch file to the directory where the Linux kernel source code exists, use the patch command.
```
$ patch -p1 < [patchfile] 
```
However, it only tested in Linux 2.6.19.7, it possibly causes errors during the patch.
Recompile the kernel.
If you are using with SystemCall system, that needed to disable kernel preemption.
Mount securityfs．
```
# mount -t securityfs securityfs /sys/kernel/security
```
When you write in /etc/fstab, add the following command.
```
ecurityfs /sys/kernel/security securityfs rw 0 0
```
Securityfs has been introduced in Linux 2.6.14. Therefore, in older kernels, LSMPMON will not work. Please fix LSMPMON to use procfs.

Enabling LSMPMON
Write 1 in /sys/kernel/security/control.
```
 # echo 1 > /sys/kernel/security/control
```
Disabling LSMPMON
Write 0 in /sys/kernel/security/control.
```
 # echo 0 > /sys/kernel/security/control
```
Getting Results
Read /sys/kernel/security/result.
In the case of with SystemCall system, please read result, result_hook, result_syscall if necessary.
```
 # less /sys/kernel/security/result
```
Enabling LSMPMON when OS startup
Write in the boot command line, "lsmpmon=1". (default: invalid)

Hiding the measurement result of the hook point that hook function is not available.
Displaying the subject name and object name.
Implement as LKM.

If you want to contact for us here please.

Graduate School of Natural Science and Technology, Okayama University
Yamauchi(Tabata) Laboratory
E-mail: lsmpmon(at)swlab.cs.okayama-u.ac.jp