On Wed, Feb 14, 2018 at 9:47 PM, Richard Guy Briggs <rgb(a)redhat.com> wrote:
These fixes should speed up audit syscall entry by doing away with
the
audit entry filter check, moving up the valid connection check before
filling in the context and not caring if there is a bug when audit is
disabled.
Passes audit-testsuite.
See:
https://github.com/linux-audit/audit-kernel/issues/6
v3:
- squash patch 1 and 2
v2:
- bail earlier to avoid setting up unneeded state
- don't bother checking for bug when disabled
Richard Guy Briggs (2):
audit: deprecate the AUDIT_FILTER_ENTRY filter
audit: bail before bug check if audit disabled
kernel/auditfilter.c | 4 ++--
kernel/auditsc.c | 22 ++++++++++------------
2 files changed, 12 insertions(+), 14 deletions(-)
Both patches merged into audit/next, thanks.
--
paul moore
www.paul-moore.com