[PATCH 2/2] audit: Syscall auditing lite

2014-05-30 Thread Andy Lutomirski
AFAICS the main use of syscall auditing is to get syscall information for syscalls that are already causing another audit message. We don't need any of the fancy syscall auditing machinery for that, though: we can just log this information directly. This should have essentially no overhead and

[PATCH 2/2] audit: Syscall auditing lite

2014-05-30 Thread Andy Lutomirski
AFAICS the main use of syscall auditing is to get syscall information for syscalls that are already causing another audit message. We don't need any of the fancy syscall auditing machinery for that, though: we can just log this information directly. This should have essentially no overhead and