[PATCH 2/2] audit: shrink audit_krule by using smaller bitfields

Richard Guy Briggs rgb at redhat.com
Tue Dec 23 18:20:15 UTC 2014


Replace five 32-bit fields with one.  Move a nearby 32-bit field to enable
64-bit alignment.

Signed-off-by: Richard Guy Briggs <rgb at redhat.com>
---
 include/linux/audit.h |   13 +++++++------
 1 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/include/linux/audit.h b/include/linux/audit.h
index b481779..bd06f92 100644
--- a/include/linux/audit.h
+++ b/include/linux/audit.h
@@ -46,13 +46,14 @@ struct audit_tree;
 struct sk_buff;
 
 struct audit_krule {
-	u32			pflags;
-	u32			flags;
-	u32			listnr;
-	u32			action;
-	u32			mask[AUDIT_BITMASK_SIZE];
+	u32			listnr:4,
+				flags:5,
+				action:2,
+				pflags:1,
+				field_count:7,
+				reserved:13;
 	u32			buflen; /* for data alloc on list rules */
-	u32			field_count;
+	u32			mask[AUDIT_BITMASK_SIZE];
 	char			*filterkey; /* ties events to rules */
 	struct audit_field	*fields;
 	struct audit_field	*arch_f; /* quick access to arch field */
-- 
1.7.1




More information about the Linux-audit mailing list