[PATCH -v2] Audit: push audit success and retcode into arch ptrace.h
Oleg Nesterov
oleg at redhat.com
Thu Jun 9 04:37:20 EST 2011
On 06/08, Eric Paris wrote:
>
> On Wed, 2011-06-08 at 18:36 +0200, Oleg Nesterov wrote:
> > And I guess, all CONFIG_AUDITSYSCALL code in entry.S is only needed to
> > microoptimize the case when TIF_SYSCALL_AUDIT is the only reason for the
> > slow path. I wonder if it really makes the measureble difference...
>
> All I know is what Roland put in the changelog:
>
> Avoiding the iret return path when syscall audit is enabled helps
> performance a lot.
>
> I believe this was a result of Fedora starting auditd by default and
> then Linus bitching about how slow a null syscall in a tight loop was.
> It was an optimization for a microbenchmark. How much it affects things
> on a real syscall that does real work is probably going to be determined
> by how much work is done in the syscall.
and probably by how much work is done in audit_syscall_entry/exit.
OK. Thanks a lot Eric for your explanations.
Oleg.
More information about the Linuxppc-dev
mailing list