From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754584AbbGQCms (ORCPT ); Thu, 16 Jul 2015 22:42:48 -0400 Received: from mx1.redhat.com ([209.132.183.28]:52327 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752947AbbGQCmr (ORCPT ); Thu, 16 Jul 2015 22:42:47 -0400 From: Paul Moore To: Richard Guy Briggs Cc: linux-audit@redhat.com, linux-kernel@vger.kernel.org, sgrubb@redhat.com, eparis@redhat.com Subject: Re: [PATCH V6 4/4] audit: avoid double copying the audit_exe path string Date: Thu, 16 Jul 2015 22:42:46 -0400 Message-ID: <10055943.x4AmddWIeM@sifl> Organization: Red Hat User-Agent: KMail/4.14.10 (Linux/4.1.2-gentoo; KDE/4.14.10; x86_64; ; ) In-Reply-To: <20150717020128.GF32473@madcap2.tricolour.ca> References: <9338092.i1kyKho6FJ@sifl> <20150717020128.GF32473@madcap2.tricolour.ca> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thursday, July 16, 2015 10:01:28 PM Richard Guy Briggs wrote: > On 15/07/16, Paul Moore wrote: > > On Tuesday, July 14, 2015 11:50:26 AM Richard Guy Briggs wrote: > > > Make this interface consistent with watch and filter key, avoiding the > > > extra string copy and simply consume the new string pointer. > > > > > > Signed-off-by: Richard Guy Briggs > > > --- > > > > > > kernel/audit_exe.c | 8 ++++++-- > > > kernel/audit_fsnotify.c | 9 +-------- > > > kernel/auditfilter.c | 2 +- > > > 3 files changed, 8 insertions(+), 11 deletions(-) > > > > Merge this patch too, there is no reason why these needs to be its own > > patch. > I wanted to keep this patch seperate until it is well understood and > accepted rather than mix it in. > > I'm fine merging it if you prefer. Like I mentioned in one of the patches, I'm not really a fan of how audit handles the alloc/free'ing of some things, but I think it is more important to be consistent within audit itself. At some point we'll fix this, but it doesn't have to be now. Go ahead and merge the patch with the others. -- paul moore security @ redhat