[patch] fix syscall speedup patch mips typo

Steve Grubb sgrubb at redhat.com
Wed Mar 15 20:14:49 UTC 2006


On Wednesday 15 March 2006 15:04, Linda Knippers wrote:
> Considering all the information that's duplicated, it seems like a
> pretty heavyweight way to get the auid, 

Linda, this is not heavyweight. This is providing as much information as is 
available to keep the record as close as possible to what we had before.

> and going back to Jason's original mail, this doesn't seem to be the reason
> it was added.

Linda, regardless of what the email says, that was the reason. I was there. :)

> I can understand wanting to optimize the code when there are no audit
> rules (although one could optimize it by disabling audit)

No because then you lose the avc messages going to the audit system.

-Steve




More information about the Linux-audit mailing list