Skip to content

audit_debug: diagnostics for audit internal workings

Richard Guy Briggs linux-audit 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest13 patches 4 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/13audit_debug: set reserve to same size as backlogkernel/audit.c+2 -20 replies
2/13audit_debug: squawk when digging into reservekernel/audit.c+8 -00 replies
3/13audit_debug: proc instrumentationinclude/linux/skbuff.h kernel/audit.c+64 -02 replies
4/13audit_debug: add /proc counters for overflows, waiters, recovers, reserveskernel/audit.c+24 -00 replies
5/13audit_debug: proc debug output easier to pastekernel/audit.c+51 -240 replies
6/13audit_debug: don't let systemd change configkernel/audit.c+8 -62 replies
7/13audit_debug: instrument audit_cmd_mutex contentionkernel/audit.c+17 -10 replies
8/13audit_debug: seperate out audit_titles in proc displaykernel/audit.c+18 -20 replies
9/13netlink_debug: instrument timing of calls by init/systemd or audit_pidnet/netlink/af_netlink.c+16 -00 replies
10/13audit_debug: bark on impossible reserve process conditions in while loopkernel/audit.c+12 -00 replies
11/13audit_debug: instrument audit_receive timingkernel/audit.c+16 -00 replies
12/13audit_debug: list processes and frequencies waiting for auditdkernel/audit.c+32 -00 replies
13/13audit_debug: print inode nr for each path when listing exe ruleskernel/audit.h kernel/audit_fsnotify.c kernel/auditfilter.c+8 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [ARCHIVE DEBUG 00/13] audit_debug: diagnostics for audit internal workings

A number of diagnostic patches including a /proc/audit* interface to get a better view of what is happenning with what frequency in the audit queue code.

Richard Guy Briggs (13):
audit_debug: set reserve to same size as backlog
audit_debug: squawk when digging into reserve
audit_debug: proc instrumentation
audit_debug: add /proc counters for overflows, waiters, recovers,
reserves
audit_debug: proc debug output easier to paste
audit_debug: don't let systemd change config
audit_debug: instrument audit_cmd_mutex contention
audit_debug: seperate out audit_titles in proc display
netlink_debug: instrument timing of calls by init/systemd or
audit_pid
audit_debug: bark on impossible reserve process conditions in while
loop
audit_debug: instrument audit_receive timing
audit_debug: list processes and frequencies waiting for auditd
audit_debug: print inode nr for each path when listing exe rules

 include/linux/skbuff.h   |   16 ++++
 kernel/audit.c           |  219 ++++++++++++++++++++++++++++++++++++++++++++--
 kernel/audit.h           |    2 +
 kernel/audit_fsnotify.c  |    5 +
 kernel/auditfilter.c     |    1 +
 net/netlink/af_netlink.c |   16 ++++
 6 files changed, 250 insertions(+), 9 deletions(-)