[PATCH V3 0/2] audit: speed up audit syscall entry

Richard Guy Briggs rgb at redhat.com
Thu Feb 15 02:47:42 UTC 2018


These fixes should speed up audit syscall entry by doing away with the
audit entry filter check, moving up the valid connection check before
filling in the context and not caring if there is a bug when audit is
disabled.

Passes audit-testsuite.
See: https://github.com/linux-audit/audit-kernel/issues/6

v3:
  - squash patch 1 and 2
v2:
  - bail earlier to avoid setting up unneeded state
  - don't bother checking for bug when disabled

Richard Guy Briggs (2):
  audit: deprecate the AUDIT_FILTER_ENTRY filter
  audit: bail before bug check if audit disabled

 kernel/auditfilter.c |  4 ++--
 kernel/auditsc.c     | 22 ++++++++++------------
 2 files changed, 12 insertions(+), 14 deletions(-)

-- 
1.8.3.1




More information about the Linux-audit mailing list