Messages in this thread |  | | From | Richard Guy Briggs <> | Subject | [PATCH 0/7] audit fsnotify cleanups for watches and trees | Date | Thu, 2 Oct 2014 17:38:42 -0400 |
| |
This is a collection of patches to clean up some issues discovered while implementing audit by exe path.
They compile and have been lightly tested.
I'd be interested in feedback about approaches or details or grossly misunderstanding some fundamental concepts.
Thanks!
Richard Guy Briggs (7): audit: put rule existence check in canonical order audit: cull redundancy in audit_rule_change audit: eliminate string copy for new tree rules audit: optimize add to parent skipping needless search and consuming parent ref audit: remove redundant watch refcount audit: remove extra audit_get_parent() audit: rename audit_log_remove_rule to disambiguate for trees
kernel/audit_tree.c | 13 +++++++------ kernel/audit_watch.c | 29 ++++++++++++++++------------- kernel/auditfilter.c | 34 +++++++++++----------------------- 3 files changed, 34 insertions(+), 42 deletions(-)
|  |