These fixes should speed up audit syscall entry by doing away with the audit entry filter check, moving up the valid connection check before filling in the context and not caring if there is a bug when audit is disabled.
Passes audit-testsuite. See: https://github.com/linux-audit/audit-kernel/issues/6 v3: - squash patch 1 and 2 v2: - bail earlier to avoid setting up unneeded state - don't bother checking for bug when disabled Richard Guy Briggs (2): audit: deprecate the AUDIT_FILTER_ENTRY filter audit: bail before bug check if audit disabled kernel/auditfilter.c | 4 ++-- kernel/auditsc.c | 22 ++++++++++------------ 2 files changed, 12 insertions(+), 14 deletions(-) -- 1.8.3.1 -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
