audit.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Eiichi Tsukata <eiichi.tsukata@nutanix.com>
To: paul@paul-moore.com, eparis@redhat.com,
	linux-kernel@vger.kernel.org, audit@vger.kernel.org
Cc: Eiichi Tsukata <eiichi.tsukata@nutanix.com>
Subject: [PATCH v2 0/2] audit: syscall audit optimization (> +6% faster)
Date: Tue, 18 Apr 2023 11:09:17 +0000	[thread overview]
Message-ID: <20230418110919.221578-1-eiichi.tsukata@nutanix.com> (raw)

This patchset is an optimization of auditd_test_task() function.
As is described in Patch 1, it improves the performance of syscall
auditing.

Benchmarks
==========

Run the following micro benchmarks:

  (1) dd:
    dd if=/dev/zero of=/dev/null bs=1 count=5M

  (2) UnixBench syscall:
    ./Run syscall -i 10 -c 1

With rule:

  -a never,exit -F arch=b64 -S uname

Results:

  (1) dd
    Base line    : 2.572 sec
    /w this patch: 2.418 sec (6.3% faster)

  (2) UnixBench syscall Index Score
    Base line    : 860
    /w this patch: 953 (10.8% faster)


This patchset consists of the following parts:

  Patch 1: add global auditd_pid to make auditd_test_task() faster
  Patch 2: cleanup: replace auditd_conn.pid with auditd_pid

v1 -> v2:
  - Use global auditd_pid intead of pid.is_auditd
  - Add UnixBench syscall benchmark

v1: https://lore.kernel.org/audit/20230414031325.82840-1-eiichi.tsukata@nutanix.com/

Eiichi Tsukata (2):
  audit: add global auditd_pid to make auditd_test_task() faster
  audit: replace auditd_conn.pid with auditd_pid

 kernel/audit.c | 61 +++++++++++++++++---------------------------------
 kernel/audit.h |  4 +++-
 2 files changed, 24 insertions(+), 41 deletions(-)

-- 
2.39.2


             reply	other threads:[~2023-04-18 11:10 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2023-04-18 11:09 Eiichi Tsukata [this message]
2023-04-18 11:09 ` [PATCH v2 1/2] audit: add global auditd_pid to make auditd_test_task() faster Eiichi Tsukata
2023-04-18 13:19   ` Paul Moore
2023-04-18 11:09 ` [PATCH v2 2/2] audit: replace auditd_conn.pid with auditd_pid Eiichi Tsukata

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20230418110919.221578-1-eiichi.tsukata@nutanix.com \
    --to=eiichi.tsukata@nutanix.com \
    --cc=audit@vger.kernel.org \
    --cc=eparis@redhat.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=paul@paul-moore.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).