iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

AUDIT: Speed up audit_filter_syscall() for the non-auditable case.

Browse Source 
It was showing up fairly high on profiles even when no rules were set.
Make sure the common path stays as fast as possible.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
This commit is contained in:
David Woodhouse 2005-08-17 14:49:57 +01:00
parent 413a1c7520
commit c389649594
1 changed files with 12 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
kernel/auditsc.c
View File

@ -513,20 +513,23 @@ static enum audit_state audit_filter_syscall(struct task_struct *tsk,
struct list_head *list) struct list_head *list)
{ {
struct audit_entry *e; struct audit_entry *e;
enum audit_state state; enum audit_state state;
int word = AUDIT_WORD(ctx->major);
int bit = AUDIT_BIT(ctx->major);
if (audit_pid && tsk->tgid == audit_pid) if (audit_pid && tsk->tgid == audit_pid)
return AUDIT_DISABLED; return AUDIT_DISABLED;
rcu_read_lock(); rcu_read_lock();
list_for_each_entry_rcu(e, list, list) { if (!list_empty(list)) {
if ((e->rule.mask[word] & bit) == bit int word = AUDIT_WORD(ctx->major);
&& audit_filter_rules(tsk, &e->rule, ctx, &state)) { int bit = AUDIT_BIT(ctx->major);
rcu_read_unlock();
return state; list_for_each_entry_rcu(e, list, list) {
} if ((e->rule.mask[word] & bit) == bit
&& audit_filter_rules(tsk, &e->rule, ctx, &state)) {
rcu_read_unlock();
return state;
}
}
} }
rcu_read_unlock(); rcu_read_unlock();
return AUDIT_BUILD_CONTEXT; return AUDIT_BUILD_CONTEXT;
@ -1023,7 +1026,6 @@ void audit_syscall_exit(struct task_struct *tsk, int valid, long return_code)
} else { } else {
audit_free_names(context); audit_free_names(context);
audit_free_aux(context); audit_free_aux(context);
audit_zero_context(context, context->state);
tsk->audit_context = context; tsk->audit_context = context;
} }
out: out: