objective-see / BlockBlock

BlockBlock provides continual protection by monitoring persistence locations.
GNU General Public License v3.0
619 stars 38 forks source link

Large cmake builds are slow - syspolicyd #65

Closed flipphillips closed 7 months ago

flipphillips commented 11 months ago

I'm just beginning to track this down but I've noticed that, when I do a project build here using ninja/cmake it will be terribly slow with BlockBlock enabled. If I disable BlockBlock the compile proceeds as expected.

A quick look shows that syspolicyd is getting hit really hard with BlockBlock enabled. With it disabled there's no such bottleneck.

I will try to regress this a little further, of course, but wondered if it made any obvious sense?

When it is enabled, there are lots of

info    00:00:25.068108-0400    syspolicyd  looking up ticket: <private>, 2, 0
info    00:00:25.106178-0400    syspolicyd  completing lookup: <private>, 3

and when disabled, they don't happen.


macOS Ventura / 13.5 MBP m1 / 64gb cmake version 3.27.1 ninja --version 1.11.1

Jamf / MDM university stuff.

art-divin commented 7 months ago

Same as in #68