[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [patch] fix syscall speedup patch mips typo



On Thu, 2006-03-16 at 12:52 -0500, Amy Griffis wrote:
> The justification for this patch (mostly discussed offlist) was that
> many users are only interested in using audit to log records from
> SELinux but don't want to incur the performance penalty of syscall
> auditing.  Fixing the loginuid and allowing userspace messages in the
> absence of syscall auditing should cover their requirements and allow
> them to simply turn syscall auditing off.

This makes more sense to me.  Further, it seems like someone should be
working on making the syscall audit processing more efficient so that
people aren't driven to disabling syscall auditing just because it is so
costly.  Optimizing only for the users who don't need/want syscall
auditing ensures that it will always remain a niche feature with a small
user community.

-- 
Stephen Smalley
National Security Agency


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]