audit: dynamically allocate audit_names when not enough space is in the names array

Browse Source

This patch does 2 things.  First it reduces the number of audit_names
allocated in every audit context from 20 to 5.  5 should be enough for all
'normal' syscalls (rename being the worst).  Some syscalls can still touch
more the 5 inodes such as mount.  When rpc filesystem is mounted it will
create inodes and those can exceed 5.  To handle that problem this patch will
dynamically allocate audit_names if it needs more than 5.  This should
decrease the typicall memory usage while still supporting all the possible
kernel operations.

Signed-off-by: Eric Paris <eparis@redhat.com>

...

This commit is contained in:

Eric Paris authored and Al Viro committed 2012-01-17 16:16:54 -05:00

1 parent 5ef30ee53b

commit 5195d8e217

1 file changed

+215 -188

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

kernel/auditsc.c

+215 -188

File diff suppressed because it is too large. Load diff