Re: audit.82 kernel

On Sunday 31 July 2005 06:11, David Woodhouse wrote: Here's the new numbers - DISABLED: real 0m35.197s user 0m2.005s sys 0m33.192s ENABLED: real 0m41.511s user 0m2.722s sys 0m38.789s performance for this test seemed better under kernel .82. This change must have done something with caching. The current stats: 43376 total 0.0204 5558 link_path_walk 1.5971 4592 __d_lookup 9.2768 2907 inode_has_perm 34.6071 1877 avc_lookup 10.7257 1749 selinux_inode_permission 10.7963 1723 atomic_dec_and_lock 9.5722 1500 path_lookup 4.8544 1463 dput 1.3815 1417 direct_strncpy_from_user 15.2366 1406 audit_notify_watch 16.5412 1292 audit_syscall_exit 1.0530 1282 audit_inode 7.6766 1275 system_call 28.9773 Audit functions are way down the list. SE Linux has more to do with performance now than audit. That's what the comments say the ->previous pointer is used for. -Steve