Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 175366 - audit performance enhancement patches
audit performance enhancement patches
Product: Red Hat Enterprise Linux 4
Classification: Red Hat
Component: kernel (Show other bugs)
All Linux
medium Severity medium
: ---
: ---
Assigned To: Alexander Viro
Brian Brock
Depends On:
Blocks: RHEL4U4Audit
  Show dependency treegraph
Reported: 2005-12-09 10:11 EST by Linda Wang
Modified: 2007-11-30 17:07 EST (History)
3 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2007-01-04 08:50:15 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
patch to help performance in logging path (3.35 KB, patch)
2005-12-09 11:27 EST, Steve Grubb
no flags Details | Diff

  None (edit)
Description Linda Wang 2005-12-09 10:11:12 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.8) Gecko/20050512 Red Hat/1.0.4-1.4.1 Firefox/1.0.4

Description of problem:
Performance issues with audit. With audit, we need to convert all the hook
functions to use an inline function that checks audit_enable and calls the
real audit function only if needed.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1.boot the kernel
2.turn audit on

Actual Results:  performance degrade drametically

Expected Results:  performance not degrade as much.

Additional info:
Comment 2 Steve Grubb 2005-12-09 11:27:36 EST
Created attachment 122079 [details]
patch to help performance in logging path

This patch also avoids some uneccessary variable initialization code.
Comment 3 Steve Grubb 2005-12-09 11:37:23 EST
There was also a technique worked out on the audit mail list to stub the hook
functions with inline functions and call the real audit function if audit is
enabled. It can be found here:


This code has not been developed. It needs to be since its a simple optimization.

Note You need to log in before you can comment on or make changes to this bug.