[fedora-java] Enhanced aot-compile script

[Andrew Haley]

Gary Benson writes:
 > David Walluck wrote:
 > > Andrew Haley wrote:
 > > > It will be invoked from the specfile, but by either
 > > > 
 > > > a.  Going to some java dir and running make, or
 > > > b.  Running some VM-agnostic script that does a.
 > > 
 > > It happens so quick. Why not have `java' be a script that invokes
 > > gij, and then just run it from there?

Rebuild every time?  It's fast, but it's not _that_ fast.  The speed
of rebuilding depends how many libraries you have installed, and
scalability was my first design goal.  (The time taken to do the
rebuild is O(N) in theory, but likely slightly worse in practice
because of the page cache.)

 > It needs to happen as root.
 > 
 > Though, I wonder if per-session databases might not be a better idea.
 > Andrew?

It's a bad idea IMO.  The libraries that are installed are global on
the system, and the database should be too.

The database is in memory that's shared between all processes, and for
that to be secure only root has write access to it.  There's no reason
not to have per-session databases in some special applications, but it
is *not* a good choice for a default policy.

Andrew.