[PATCH v2 0/2] audit: syscall audit optimization (> +6% faster)

From: Eiichi Tsukata
Date: Tue Apr 18 2023 - 07:10:15 EST


This patchset is an optimization of auditd_test_task() function.
As is described in Patch 1, it improves the performance of syscall
auditing.

Benchmarks
==========

Run the following micro benchmarks:

(1) dd:
dd if=/dev/zero of=/dev/null bs=1 count=5M

(2) UnixBench syscall:
./Run syscall -i 10 -c 1

With rule:

-a never,exit -F arch=b64 -S uname

Results:

(1) dd
Base line : 2.572 sec
/w this patch: 2.418 sec (6.3% faster)

(2) UnixBench syscall Index Score
Base line : 860
/w this patch: 953 (10.8% faster)


This patchset consists of the following parts:

Patch 1: add global auditd_pid to make auditd_test_task() faster
Patch 2: cleanup: replace auditd_conn.pid with auditd_pid

v1 -> v2:
- Use global auditd_pid intead of pid.is_auditd
- Add UnixBench syscall benchmark

v1: https://lore.kernel.org/audit/20230414031325.82840-1-eiichi.tsukata@xxxxxxxxxxx/

Eiichi Tsukata (2):
audit: add global auditd_pid to make auditd_test_task() faster
audit: replace auditd_conn.pid with auditd_pid

kernel/audit.c | 61 +++++++++++++++++---------------------------------
kernel/audit.h | 4 +++-
2 files changed, 24 insertions(+), 41 deletions(-)

--
2.39.2