[PATCH] fix some performance gaps in Xace
Alan Coopersmith
alan.coopersmith at sun.com
Mon Nov 5 08:38:16 PST 2007
Eamon Walsh wrote:
> Arjan van de Ven wrote:
>> This is only a conversion of three of the hooks; I would suggest doing
>> all of them this way
>> and getting rid of the generic multiplexer entirely... but I'd like
>> input on that from the maintainer
>> (who might even be motivated to do that... for me .. with this the
>> performance thing is solved ;)
>
> The audit_begin and audit_end hooks are really only there for trusted
> solaris. Now that there are DTRACE wrappers in that very same place I'm
> considering deprecating those hooks. But for now I'll just apply the
> patch (with the camel-case names suggested)
The DTrace probe points serve a different purpose and can't replace the
auditing hooks. I am surprised that no other secure environments need
auditing though - I would have thought it was a common requirement.
--
-Alan Coopersmith- alan.coopersmith at sun.com
Sun Microsystems, Inc. - X Window System Engineering
More information about the xorg
mailing list