audit.82 kernel

[Steve Grubb]

On Sunday 31 July 2005 06:11, David Woodhouse wrote:
> I'm building audit.83 with this...

Here's the new numbers -

DISABLED:
real    0m35.197s
user    0m2.005s
sys     0m33.192s

ENABLED:
real    0m41.511s
user    0m2.722s
sys     0m38.789s

performance for this test seemed better under kernel .82. This change must 
have done something with caching. The current stats:
 43376 total                                    0.0204
  5558 link_path_walk                      1.5971
  4592 __d_lookup                           9.2768
  2907 inode_has_perm                    34.6071
  1877 avc_lookup                           10.7257
  1749 selinux_inode_permission      10.7963
  1723 atomic_dec_and_lock            9.5722
  1500 path_lookup                          4.8544
  1463 dput                                     1.3815
  1417 direct_strncpy_from_user       15.2366
  1406 audit_notify_watch                 16.5412
  1292 audit_syscall_exit                  1.0530
  1282 audit_inode                            7.6766
  1275 system_call                           28.9773

Audit functions are way down the list. SE Linux has more to do with 
performance now than audit.

> Why do you speak of 'nested function calls'?

That's what the comments say the ->previous pointer is used for.

-Steve