Hello,
We just released a new version of the audit package. It can be downloaded
from:
https://github.com/linux-audit/audit-userspace/releases/
The ChangeLog is:
- Reduce memory churn in the af_unix plugin
- Add --with-asan to enable ASAN for unit tests
- Code cleanups
- Improve auplugin_fgets performance
- Update syscalls and io_uring tables for the 6.19 kernel
- Fix python bindings to correctly handle passing file objects to auparse_init
There's 2 things to highlight in this release. The first is that there should
be a significant performance improvement in the plugins. They should be more
efficient in processing events. The auplugin_fgets functions weren't
effectively using their buffer and went back to a read syscall even when they
had the next record in memory. That is fixed and plugins using auplugin_fgets
should be faster.
The other thing is that over last summer, the audit project moved at an
unprecedented rate of change. Since September the focus has been on
stabilizing all that change. I have used every static analysis program I can
get my hands on to look for issues. Nothing found was a serious problem. But
on error paths there were quite a few cleanups. If you measure the project by
findings from static analysis, you should be happier with the scan results.
Gcc 16 has new features and this update fixes the many const problems reported
by the new compiler.
So, my message about this release is that this really is the cleanup from all
the change. There are no plans in the near term roadmap that would have the
amount of change we saw last year.
If you notice any problems with this release, please let us know.
SHA256: 866a659c91746ee4436fa6f99d4f80768fc1a3aa92e6ec2081e353fcfc79589f
-Steve