Re: [PATCH V3 0/2] audit: speed up audit syscall entry

From: Paul Moore
Date: Thu Feb 15 2018 - 14:50:24 EST


On Wed, Feb 14, 2018 at 9:47 PM, Richard Guy Briggs <rgb@xxxxxxxxxx> wrote:
> These fixes should speed up audit syscall entry by doing away with the
> audit entry filter check, moving up the valid connection check before
> filling in the context and not caring if there is a bug when audit is
> disabled.
>
> Passes audit-testsuite.
> See: https://github.com/linux-audit/audit-kernel/issues/6
>
> v3:
> - squash patch 1 and 2
> v2:
> - bail earlier to avoid setting up unneeded state
> - don't bother checking for bug when disabled
>
> Richard Guy Briggs (2):
> audit: deprecate the AUDIT_FILTER_ENTRY filter
> audit: bail before bug check if audit disabled
>
> kernel/auditfilter.c | 4 ++--
> kernel/auditsc.c | 22 ++++++++++------------
> 2 files changed, 12 insertions(+), 14 deletions(-)

Both patches merged into audit/next, thanks.

--
paul moore
www.paul-moore.com