Symptom:
I need to reduce system load on the CA ControlMinder server.
Solution:
To reduce system load, do the following:
Deep hierarchies of users and resources require system loads to obtain and check all dependencies.
If you define a generic rule for a frequently used directory, CA ControlMinder checks many system actions. For example, if you write a generic protection rule that protects /usr/lib/*, CA ControlMinder checks every action in the system.
To specify that CA ControlMinder bypasses file access checks when the file belongs to a process file system, verify that the value of the proc_bypass configuration setting is 1 in the [SEOS_syscall] section of the seos.ini file.
Note: For more information about seos.ini file tokens, see the Reference Guide.
Copyright © 2013 CA Technologies.
All rights reserved.
|
|