From mboxrd@z Thu Jan 1 00:00:00 1970 From: Richard Guy Briggs Subject: Re: Linux audit performance impact Date: Tue, 3 Feb 2015 11:45:31 -0500 Message-ID: <20150203164531.GZ18752@madcap2.tricolour.ca> References: <9DBA79E0CE64AA42B07DEDAAD0F7DB9141659CA2@G4W3222.americas.hpqcorp.net> <2570512.tu3C9iW5N2@x2> <9DBA79E0CE64AA42B07DEDAAD0F7DB9141659EE1@G4W3222.americas.hpqcorp.net> <20150129165231.GU29998@madcap2.tricolour.ca> <9DBA79E0CE64AA42B07DEDAAD0F7DB914165A49A@G4W3222.americas.hpqcorp.net> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: Content-Disposition: inline In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Satish Chandra Kilaru Cc: "linux-audit@redhat.com" , "Viswanath, Logeswari P (MCOU OSTL)" List-Id: linux-audit@redhat.com T24gMTUvMDIvMDMsIFNhdGlzaCBDaGFuZHJhIEtpbGFydSB3cm90ZToKPiBIb3cgbWFueSBldmVu dHMgY2FuIGtlcm5lbCBhY2N1bXVsYXRlIHdpdGhvdXQgSS9vID8KClRoZSBrZXJuZWwgZGVmYXVs dCBpcyA2NCAqYnVmZmVycyosIGJ1dCBJIHRoaW5rIEZlZG9yYSBhbmQgUkhFTCBzZXQgaXQKdG8g MzIwLiAgSXQgaXMgbm93IHBvc3NpYmxlIHRvIHNldCBpdCB0byAiMCIgd2hpY2ggbWVhbnMgbGlt aXRlZCBvbmx5IGJ5CnN5c3RlbSByZXNvdXJjZXMuICBTZWUgIm1hbiBhdWRpdGN0bCIsICItYiIg b3B0aW9uLiAgQW4gZXZlbnQgY2FuIGJlCm1hZGUgdXAgb2Ygc2V2ZXJhbCBidWZmZXJzLgoKT2Yg Y291cnNlLCBob3cgbG9uZyBhIHN5c3RlbSBsYXN0cyBiZWZvcmUgdGhlIHF1ZXVlIGJsb3dzIHVw IGRlcGVuZHMgb24KeW91ciBydWxlIHNldC4uLgoKSG93ZXZlciwgYXQgdGhlIG1vbWVudCwgaXQg d2lsbCBzdGlsbCB3cml0ZSBvdXQgdG8ga2xvZyBpZiBhdWRpdGQgaXNuJ3QKcnVubmluZy4KCj4g T24gVHVlc2RheSwgRmVicnVhcnkgMywgMjAxNSwgVmlzd2FuYXRoLCBMb2dlc3dhcmkgUCAoTUNP VSBPU1RMKSA8Cj4gbG9nZXN3YXJpLnB2QGhwLmNvbT4gd3JvdGU6Cj4gCj4gPiBJIGRvbid0IHdh bnQgdG8gZGlzYWJsZSBhdWRpdGluZyAoaS5lLiBkaXNhYmxlIGF1ZGl0IHJlY29yZCBjb2xsZWN0 aW9uKSwKPiA+IGJ1dCBqdXN0IGRvIG5vdCB3YW50IHRoZSByZWNvcmRzIHRvIGRlbGl2ZXJlZCB0 byB1c2VyIHNwYWNlIHNpbmNlIEkgd2FudCB0bwo+ID4gcmVtb3ZlIHRoZSBJL08gb3ZlcmhlYWQg d2hpbGUgcnVubmluZyB0aGUgcGVyZm9ybWFuY2UgdGVzdC4KPiA+IElzIHRoZXJlIGFueSBvcHRp b24gZm9yIHRoaXM/Cj4gPgo+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0KPiA+IEZyb206 IFJpY2hhcmQgR3V5IEJyaWdncyBbbWFpbHRvOnJnYkByZWRoYXQuY29tIDxqYXZhc2NyaXB0Ojs+ XQo+ID4gU2VudDogVGh1cnNkYXksIEphbnVhcnkgMjksIDIwMTUgMTA6MjMgUE0KPiA+IFRvOiBW aXN3YW5hdGgsIExvZ2Vzd2FyaSBQIChNQ09VIE9TVEwpCj4gPiBDYzogU2F0aXNoIENoYW5kcmEg S2lsYXJ1OyBTdGV2ZSBHcnViYjsgbGludXgtYXVkaXRAcmVkaGF0LmNvbQo+ID4gPGphdmFzY3Jp cHQ6Oz4KPiA+IFN1YmplY3Q6IFJlOiBMaW51eCBhdWRpdCBwZXJmb3JtYW5jZSBpbXBhY3QKPiA+ Cj4gPiBPbiAxNS8wMS8yOSwgVmlzd2FuYXRoLCBMb2dlc3dhcmkgUCAoTUNPVSBPU1RMKSB3cm90 ZToKPiA+ID4gUGxlYXNlIHJlYWQgbXkgcXVlc3Rpb24gYXMg4oCcSXMgdGhlcmUgYW55IG9wdGlv biB0byBjb25maWd1cmUga2F1ZGl0Cj4gPiA+IG5vdCB0byBsb2cgYXVkaXQgcmVjb3JkcyB0byBz eXNsb2c/IHdoZW4gYXVkaXRkIG5vdCBydW5uaW5nLuKAnQo+ID4KPiA+IFllYWgsIHJlbW92ZSBh dWRpdD0xIGZyb20gdGhlIGtlcm5lbCBjb21tYW5kIGxpbmUsIG9yIHNldCBhdWRpdD0wIGluIGl0 cwo+ID4gcGxhY2UuICBUaGlzIHdpbGwgc3RvcCBhbGwgYnV0IEFWQ3MgYW5kIGlmIGF1ZGl0ZCBo YXMgZXZlciBydW4gc2luY2UgYm9vdC4KPiA+IElmIGF1ZGl0PTAgaXMgb24gdGhlIGtlcm5lbCBi b290IGxpbmUsIGl0IHdpbGwgYmUgaW1wb3NzaWJsZSB0byBydW4gYXVkaXRkLgo+ID4KPiA+IFRo ZXJlIGlzIGEgZmVhdHVyZSByZXF1ZXN0IHRoYXQgaXMgbGlrZWx5IGNvbWluZyBzb29uIHRoYXQg Y291bGQgYmUKPiA+IHVzZWZ1bDoKPiA+Cj4gPiBodHRwczovL2J1Z3ppbGxhLnJlZGhhdC5jb20v c2hvd19idWcuY2dpP2lkPTExNjAwNDYKPiA+ICJJZiBubyBhdWRpdCBkYWVtb24gaXMgcnVubmlu ZywgYnV0IGFuIGF1ZGl0IG11bHRpY2FzdCBzdWJzY3JpYmVyIGlzCj4gPiBhcm91bmQsIHRoZW4g dGhlIGtlcm5lbCBzaG91bGRuJ3QgZm9yd2FyZCBhdWRpdCBkYXRhIHRvIGttc2ciCj4gPgo+ID4g PiBGcm9tOiBWaXN3YW5hdGgsIExvZ2Vzd2FyaSBQIChNQ09VIE9TVEwpCj4gPiA+IFNlbnQ6IFRo dXJzZGF5LCBKYW51YXJ5IDI5LCAyMDE1IDExOjQ5IEFNCj4gPiA+IFRvOiAnU2F0aXNoIENoYW5k cmEgS2lsYXJ1JzsgU3RldmUgR3J1YmIKPiA+ID4gQ2M6IGxpbnV4LWF1ZGl0QHJlZGhhdC5jb20g PGphdmFzY3JpcHQ6Oz4KPiA+ID4gU3ViamVjdDogUkU6IExpbnV4IGF1ZGl0IHBlcmZvcm1hbmNl IGltcGFjdAo+ID4gPgo+ID4gPiBJcyB0aGVyZSBhbnkgb3B0aW9uIHRvIGNvbmZpZ3VyZSBrYXVk aXQgbm90IHRvIGxvZyBhdWRpdCByZWNvcmRzIHRvCj4gPiBzeXNsb2cgd2hlbiBhdWRpdGQgaXMg cnVubmluZz8KPiA+ID4gVGhpcyB3YXkgd2UgY2FuIGFzc2VzcyB0aGUgaW1wYWN0IG9mIGVuYWJs aW5nIGF1ZGl0IHdpdGhvdXQgaW52b2x2aW5nCj4gPiBkaXNrIEkvbyBvdmVyaGVhZC4KPiA+ID4K PiA+ID4gRnJvbTogU2F0aXNoIENoYW5kcmEgS2lsYXJ1IFttYWlsdG86aWFtLmtpbGFydUBnbWFp bC5jb20gPGphdmFzY3JpcHQ6Oz5dCj4gPiA+IFNlbnQ6IFRodXJzZGF5LCBKYW51YXJ5IDI5LCAy MDE1IDk6MTIgQU0KPiA+ID4gVG86IFN0ZXZlIEdydWJiCj4gPiA+IENjOiBsaW51eC1hdWRpdEBy ZWRoYXQuY29tIDxqYXZhc2NyaXB0Ojs+PG1haWx0bzpsaW51eC1hdWRpdEByZWRoYXQuY29tCj4g PiA8amF2YXNjcmlwdDo7Pj47IFZpc3dhbmF0aCwKPiA+ID4gTG9nZXN3YXJpIFAgKE1DT1UgT1NU TCkKPiA+ID4gU3ViamVjdDogUmU6IExpbnV4IGF1ZGl0IHBlcmZvcm1hbmNlIGltcGFjdAo+ID4g Pgo+ID4gPiBJIGFncmVlIHdpdGggeW91Li4uIGJ1dCB3cml0aW5nIHRvIGRpc2sgY2FuIHRyaWdn ZXIgZnVydGhlciBldmVudHMKPiA+IGxlYWRpbmcgc3BpcmFsbGluZyBvZiBldmVudHMuLi4KPiA+ ID4gSSBicm91Z2h0IGRvd24gbXkgc2VydmVyIGZldyB0aW1lcyB3aXRoIHN0dXBpZCBydWxlcy4u Lgo+ID4gPgo+ID4gPiBPbiBXZWQsIEphbiAyOCwgMjAxNSBhdCAxMDozOSBQTSwgU3RldmUgR3J1 YmIgPHNncnViYkByZWRoYXQuY29tCj4gPiA8amF2YXNjcmlwdDo7PjxtYWlsdG86c2dydWJiQHJl ZGhhdC5jb20gPGphdmFzY3JpcHQ6Oz4+PiB3cm90ZToKPiA+ID4gT24gV2VkbmVzZGF5LCBKYW51 YXJ5IDI4LCAyMDE1IDEwOjE4OjQ3IEFNIFNhdGlzaCBDaGFuZHJhIEtpbGFydSB3cm90ZToKPiA+ ID4gPiBXcml0ZSB5b3VyIG93biBwcm9ncmFtIHRvIHJlY2VpdmUgYXVkaXQgZXZlbnRzIGRpcmVj dGx5IHdpdGhvdXQKPiA+ID4gPiB1c2luZyBhdWRpdGQuLi4KPiA+ID4gPiBUaGF0IHNob3VsZCBi ZSBmYXN0ZXIgLi4uLgo+ID4gPiA+IEF1ZGl0ZCB3aWxsIGxvZyB0aGUgZXZlbnRzIHRvIGRpc2sg Y2F1c2luZyBtb3JlIEkvbyB0aGFuIHUgbmVlZC4uLgo+ID4gPgo+ID4gPiBCdXQgZXZlbiB0aGF0 IGlzIGNvbmZpZ3VyYWJsZSBpbiBtYW55IHdheXMuIFlvdSBjYW4gZGVjaWRlIGlmIHlvdSB3YW50 Cj4gPiA+IGxvZ2dpbmcgdG8gZGlzayBvciBub3QgYW5kIHdoYXQga2luZCBvZiBhc3N1cmFuY2Ug dGhhdCBpdCBtYWRlIGl0IHRvCj4gPiA+IGRpc2sgYW5kIHRoZSBwcmlvcml0eSBvZiB0aGF0IGF1 ZGl0IGRhZW1vbi4gVGhlbiB5b3UgYWxzbyBoYXZlIGFsbCB0aGUKPiA+ID4gbm9ybWFsIHR1bmlu ZyBrbm9icyBmb3IgZGlzayB0aHJvdWdocHV0IHRoYXQgeW91IHdvdWxkIHVzZSBmb3IgYW55Cj4g PiA+IGRpc2sgcGVyZm9ybWFuY2UgY3JpdGljYWwgc3lzdGVtLgo+ID4gPgo+ID4gPiAtU3RldmUK PiA+ID4KPiA+ID4gPiBPbiBXZWRuZXNkYXksIEphbnVhcnkgMjgsIDIwMTUsIFZpc3dhbmF0aCwg TG9nZXN3YXJpIFAgKE1DT1UgT1NUTCkgPAo+ID4gPiA+Cj4gPiA+ID4gbG9nZXN3YXJpLnB2QGhw LmNvbSA8amF2YXNjcmlwdDo7PjxtYWlsdG86bG9nZXN3YXJpLnB2QGhwLmNvbQo+ID4gPGphdmFz Y3JpcHQ6Oz4+PiB3cm90ZToKPiA+ID4gPiA+ICBIaSBTdGV2ZSwKPiA+ID4gPiA+Cj4gPiA+ID4g PiBJIGFtIExvZ2Vzd2FyaSB3b3JraW5nIGZvciBIUC4KPiA+ID4gPiA+Cj4gPiA+ID4gPgo+ID4g PiA+ID4KPiA+ID4gPiA+IFdlIHdhbnQgdG8ga25vdyBhdWRpdCBwZXJmb3JtYW5jZSBpbXBhY3Qg b24gUkhFTCBhbmQgU3VzZSBsaW51eCB0bwo+ID4gPiA+ID4gaGVscCB1cyBldmFsdWF0ZSBsaW51 eCBhdWRpdCBhcyBkYXRhIHNvdXJjZSBmb3Igb3VyIGhvc3QgYmFzZWQgSURTLgo+ID4gPiA+ID4K PiA+ID4gPiA+IFdoZW4gd2UgcmFuIG91ciBvd24gcGVyZm9ybWFuY2UgdGVzdCB3aXRoIGEgdGVz dCBhdWRpc3BkIHBsdWdpbiwKPiA+ID4gPiA+IHdlIGZvdW5kIGlmIGEgc3lzdGVtIGNhbiBwZXJm b3JtIDIwMDAwMCBvcGVuL2Nsb3NlIHN5c3RlbSBjYWxscwo+ID4gPiA+ID4gcGVyIHNlY29uZCB3 aXRob3V0IGF1ZGl0aW5nLCBzeXN0ZW0gY2FuIHBlcmZvcm0gb25seSAzMDAwCj4gPiA+ID4gPiBv cGVuL2Nsb3NlIHN5c3RlbSBjYWxscyBhdWRpdGluZyBpcyBlbmFibGVkIGZvciBvcGVuL2Nsb3Nl IHN5c3RlbQo+ID4gPiA+ID4gY2FsbCB3aGljaCBpcyBhIEhVR0UgaW1wYWN0IG9uIHRoZSBzeXN0 ZW0gcGVyZm9ybWFuY2UuIEl0IHdvdWxkIGJlCj4gPiA+ID4gPiBncmVhdCBpZiBhbnlvbmUgY2Fu IGhlbHAgdXMgYW5zd2VyaW5nIHRoZSBmb2xsb3dpbmcgcXVlc3Rpb25zLgo+ID4gPiA+ID4KPiA+ ID4gPiA+Cj4gPiA+ID4gPgo+ID4gPiA+ID4gMSkgICAgICBJcyB0aGlzIHBlcmZvcm1hbmNlIGlt cGFjdCBleHBlY3RlZD8gSWYgeWVzLCB3aGF0IGlzIHRoZQo+ID4gcmVhc29uCj4gPiA+ID4gPiBi ZWhpbmQgaXQgYW5kIGNhbiB3ZSBmaXggaXQ/Cj4gPiA+ID4gPgo+ID4gPiA+ID4gMikgICAgICBI YXZlIGFueW9uZSBkb25lIGFueSBiZW5jaG1hcmtpbmcgZm9yIHBlcmZvcm1hbmNlIGltcGFjdD8g SWYKPiA+IHllcywKPiA+ID4gPiA+IGNhbiB5b3UgcGxlYXNlIHNoYXJlIHRoZSBudW1iZXJzIGFu ZCBhbHNvIHRoZSBzdGVwcy9wcm9ncmFtcyB1c2VkCj4gPiA+ID4gPiB0aGUgcnVuIHRoZSBzYW1l Lgo+ID4gPiA+ID4KPiA+ID4gPiA+IDMpICAgICAgSGVscCB1cyB2YWxpZGF0aW5nIHRoZSBwZXJm b3JtYW5jZSB0ZXN0IHdlIGhhdmUgZG9uZSBpbiBvdXIKPiA+IHRlc3QKPiA+ID4gPiA+IHNldHVw IHVzaW5nIHRoZSBzdGVwcyBtZW50aW9uZWQgYWxvbmcgd2l0aCB0aGUgcmVzdWx0cyBhdHRhY2hl ZC4KPiA+ID4gPiA+Cj4gPiA+ID4gPgo+ID4gPiA+ID4KPiA+ID4gPiA+IEF0dGFjaGVkIHRlc3Qg cHJvZ3JhbSAobG9hZGVyLmMpIHRvIGludm9rZSBvcGVuIGFuZCBjbG9zZSBzeXN0ZW0KPiA+IGNh bGxzLgo+ID4gPiA+ID4KPiA+ID4gPiA+IEF0dGFjaGVkIGlkc2tlcm5kc3AgaXMgdGhlIGF1ZGlz cGQgcGx1Z2luIHByb2dyYW0uCj4gPiA+ID4gPgo+ID4gPiA+ID4gV2UgdXNlZCB0aW1lIGNvbW1h bmQgdG8gZGV0ZXJtaW5lIGhvdyBtdWNoIHRpbWUgdGhlIHN5c3RlbSB0b29rIHRvCj4gPiA+ID4g PiBjb21wbGV0ZSA1MDAwMCBvcGVuL2Nsb3NlIHN5c3RlbSBjYWxscyB3aXRob3V0IChyZXN1bHRz IGF0dGFjaGVkCj4gPiA+ID4gPiBXaXRob3V0LWF1ZGl0aW5nKSBhbmQgd2l0aCBhdWRpdGluZyBl bmFibGVkIG9uIHRoZSBzeXN0ZW0KPiA+ID4gPiA+IChXaXRoLWF1ZGl0aW5nLU5PTE9HLWF1ZGlz cGQtcGx1Z2luIGFuZCBXaXRoLWF1ZGl0aW5nLVJBVykKPiA+ID4gPiA+Cj4gPiA+ID4gPgo+ID4g PiA+ID4KPiA+ID4gPiA+IFN5c3RlbSBkZXRhaWxzOgo+ID4gPiA+ID4KPiA+ID4gPiA+Cj4gPiA+ ID4gPgo+ID4gPiA+ID4gMSBDUFUgbWFjaGluZQo+ID4gPiA+ID4KPiA+ID4gPiA+Cj4gPiA+ID4g Pgo+ID4gPiA+ID4gKk9TIFZlcnNpb24qCj4gPiA+ID4gPgo+ID4gPiA+ID4gUkhFTCA2LjUKPiA+ ID4gPiA+Cj4gPiA+ID4gPgo+ID4gPiA+ID4KPiA+ID4gPiA+ICpLZXJuZWwgVmVyc2lvbioKPiA+ ID4gPiA+Cj4gPiA+ID4gPiB1bmFtZSDigJNyCj4gPiA+ID4gPgo+ID4gPiA+ID4gMi42LjMyLTQz MS5lbDYueDg2XzY0Cj4gPiA+ID4gPgo+ID4gPiA+ID4KPiA+ID4gPiA+Cj4gPiA+ID4gPiBOb3Rl OiBhdWRpdGQgd2FzIG9jY3VweWluZyAzNSUgb2YgQ1BVIGFuZCB3YXMgc2xlZXBpbmcgZm9yIG1v c3Qgb2YKPiA+ID4gPiA+IHRoZSB0aW1lIHdoZXJlYXMga2F1ZGl0ZCB3YXMgb2NjdXB5aW5nIDIw JSBvZiB0aGUgQ1BVLgo+ID4gPiA+ID4KPiA+ID4gPiA+Cj4gPiA+ID4gPgo+ID4gPiA+ID4gVGhh bmtzICYgUmVnYXJkcywKPiA+ID4gPiA+Cj4gPiA+ID4gPiBMb2dlc3dhcmkuCj4gPiA+Cj4gPiA+ Cj4gPiA+Cj4gPiA+IC0tCj4gPiA+IFBsZWFzZSBEb25hdGUgdG8gd3d3Lndpa2lwZWRpYS5vcmc8 aHR0cDovL3d3dy53aWtpcGVkaWEub3JnPgo+ID4KPiA+ID4gLS0KPiA+ID4gTGludXgtYXVkaXQg bWFpbGluZyBsaXN0Cj4gPiA+IExpbnV4LWF1ZGl0QHJlZGhhdC5jb20gPGphdmFzY3JpcHQ6Oz4K PiA+ID4gaHR0cHM6Ly93d3cucmVkaGF0LmNvbS9tYWlsbWFuL2xpc3RpbmZvL2xpbnV4LWF1ZGl0 Cj4gPgo+ID4KPiA+IC0gUkdCCj4gPgo+ID4gLS0KPiA+IFJpY2hhcmQgR3V5IEJyaWdncyA8cmJy aWdnc0ByZWRoYXQuY29tIDxqYXZhc2NyaXB0Ojs+Pgo+ID4gU2VuaW9yIFNvZnR3YXJlIEVuZ2lu ZWVyLCBLZXJuZWwgU2VjdXJpdHksIEFNRVIgRU5HIEJhc2UgT3BlcmF0aW5nCj4gPiBTeXN0ZW1z LCBSZWQgSGF0IFJlbW90ZSwgT3R0YXdhLCBDYW5hZGEKPiA+IFZvaWNlOiArMS42NDcuNzc3LjI2 MzUsIEludGVybmFsOiAoODEpIDMyNjM1LCBBbHQ6ICsxLjYxMy42OTMuMDY4NHgzNTQ1Cj4gPgo+ IAo+IAo+IC0tIAo+IFBsZWFzZSBEb25hdGUgdG8gd3d3Lndpa2lwZWRpYS5vcmcKCi0gUkdCCgot LQpSaWNoYXJkIEd1eSBCcmlnZ3MgPHJicmlnZ3NAcmVkaGF0LmNvbT4KU2VuaW9yIFNvZnR3YXJl IEVuZ2luZWVyLCBLZXJuZWwgU2VjdXJpdHksIEFNRVIgRU5HIEJhc2UgT3BlcmF0aW5nIFN5c3Rl bXMsIFJlZCBIYXQKUmVtb3RlLCBPdHRhd2EsIENhbmFkYQpWb2ljZTogKzEuNjQ3Ljc3Ny4yNjM1 LCBJbnRlcm5hbDogKDgxKSAzMjYzNSwgQWx0OiArMS42MTMuNjkzLjA2ODR4MzU0NQoKLS0KTGlu dXgtYXVkaXQgbWFpbGluZyBsaXN0CkxpbnV4LWF1ZGl0QHJlZGhhdC5jb20KaHR0cHM6Ly93d3cu cmVkaGF0LmNvbS9tYWlsbWFuL2xpc3RpbmZvL2xpbnV4LWF1ZGl0