[redhat-lspp] Re: [PATCH] change lspp inode auditing

Stephen Smalley sds at tycho.nsa.gov
Thu Mar 30 19:02:06 UTC 2006


On Thu, 2006-03-30 at 13:47 -0500, Steve Grubb wrote:
> OK, below is a patch that I think addresses all issues pointed out. I've
> benchmarked it and we are at 23% performance hit. That's much better
> than before.
> 
> Signed-off-by: Steve Grubb <sgrubb at redhat.com>

> +		if (context->names[i].osid != 0) {
> +			char *ctx = NULL;
> +			int len;

Needs to be u32 to match the interface.

Otherwise, looks sane to me.  Make sure you compile without SELinux too,
and also try to boot with selinux disabled to be sure.

-- 
Stephen Smalley
National Security Agency




More information about the redhat-lspp mailing list