[GIT PULL] audit/audit-pr-20251201

[Paul Moore]

Linus,

A small set of audit changes for v6.19, the summary is below:

- Consolidate the loops in __audit_inode_child() to improve performance

  When logging a child inode in __audit_inode_child(), we first run
  through the list of recorded inodes looking for the parent and then
  we repeat the search looking for a matching child entry.  This pull
  request consolidates both searches into one pass through the recorded
  inodes, resuling in approximately a 50% reduction in audit overhead.
  
  See the commit description for the testing details.

- Combine kmalloc()/memset() into kzalloc() in audit_krule_to_data()

- Comment fixes

Paul

--
The following changes since commit 211ddde0823f1442e4ad052a2f30f050145ccada:

  Linux 6.18-rc2 (2025-10-19 15:19:16 -1000)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git
    tags/audit-pr-20251201

for you to fetch changes up to c8a3dfe7315945ebcc80ed5be8267920b609649a:

  audit: merge loops in __audit_inode_child() (2025-11-07 16:50:42 -0500)

----------------------------------------------------------------
audit/stable-6.19 PR 20251201
----------------------------------------------------------------

Gongwei Li (1):
      audit: Use kzalloc() instead of kmalloc()/memset() in
         audit_krule_to_data()

Ricardo Robaina (2):
      audit: fix comment misindentation in audit.h
      audit: merge loops in __audit_inode_child()

 kernel/audit.h       |    2 -
 kernel/auditfilter.c |    3 --
 kernel/auditsc.c     |   47 +++++++++++++++++++------------------------
 3 files changed, 23 insertions(+), 29 deletions(-)

--
paul-moore.com