From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id 417DEC433F5 for ; Mon, 29 Nov 2021 07:37:55 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S240097AbhK2HlL (ORCPT ); Mon, 29 Nov 2021 02:41:11 -0500 Received: from szxga02-in.huawei.com ([45.249.212.188]:16313 "EHLO szxga02-in.huawei.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S240827AbhK2HjJ (ORCPT ); Mon, 29 Nov 2021 02:39:09 -0500 Received: from dggpemm500024.china.huawei.com (unknown [172.30.72.56]) by szxga02-in.huawei.com (SkyGuard) with ESMTP id 4J2cZN300Kz91GK; Mon, 29 Nov 2021 15:35:08 +0800 (CST) Received: from dggpemm500023.china.huawei.com (7.185.36.83) by dggpemm500024.china.huawei.com (7.185.36.203) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2308.20; Mon, 29 Nov 2021 15:35:39 +0800 Received: from dggpemm500023.china.huawei.com ([7.185.36.83]) by dggpemm500023.china.huawei.com ([7.185.36.83]) with mapi id 15.01.2308.020; Mon, 29 Nov 2021 15:35:39 +0800 From: "zhaozixuan (C)" To: Paul Moore CC: "eparis@redhat.com" , "linux-audit@redhat.com" , "linux-kernel@vger.kernel.org" Subject: Re: [PATCH] audit: accelerate audit rule filter Thread-Topic: [PATCH] audit: accelerate audit rule filter Thread-Index: AQHX4UnhpG+k05BPVEqO6SQrGWmNIKwaIv3w Date: Mon, 29 Nov 2021 07:35:39 +0000 Message-ID: <4aac209c744848a38bb2003d601083e4@huawei.com> References: <20211123075001.3676-1-zhaozixuan2@huawei.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.174.176.92] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Pk9uIFR1ZSwgTm92IDIzLCAyMDIxIGF0IDI6NTAgQU0gWml4dWFuIFpoYW8gPHpoYW96aXh1YW4y QGh1YXdlaS5jb20+IHdyb3RlOg0KPj4gV2UgdXNlZCBsYXRfc3lzY2FsbCBvZiBsbWJlbmNoMyB0 byB0ZXN0IHRoZSBwZXJmb3JtYW5jZSBpbXBhY3Qgb2YgdGhpcyAgDQo+PiBwYXRjaC4gV2UgY2hh bmdlZCB0aGUgbnVtYmVyIG9mIHJ1bGVzIGFuZCBydW4gbGF0X3N5c2NhbGwgd2l0aCAxMDAwICAN Cj4+IHJlcGV0aXRpb25zIGF0IGVhY2ggdGVzdC4gU3lzY2FsbHMgbWVhc3VyZWQgYnkgbGF0X3N5 c2NhbGwgYXJlIG5vdCAgDQo+PiBtb25pdG9yZWQgYnkgcnVsZXMuDQo+Pg0KPj4gQmVmb3JlIHRo aXMgb3B0aW1pemF0aW9uOg0KPj4NCj4+ICAgICAgICAgICAgICBudWxsICAgICByZWFkICAgIHdy aXRlICAgICBzdGF0ICAgIGZzdGF0ICAgICAgb3Blbg0KPj4gICAwIHJ1bGVzICAxLjg3bXMgICAy Ljc0bXMgICAyLjU2bXMgICAyNi4zMW1zICA0LjEzbXMgICA2OS42Nm1zDQo+PiAgMTAgcnVsZXMg IDIuMTVtcyAgIDMuMTNtcyAgIDMuMzJtcyAgIDI2Ljk5bXMgIDQuMTZtcyAgIDc0LjcwbXMNCj4+ ICAyMCBydWxlcyAgMi40NW1zICAgMy45N21zICAgMy44Mm1zICAgMjcuMDVtcyAgNC42MG1zICAg NzYuMzVtcw0KPj4gIDMwIHJ1bGVzICAyLjY0bXMgICA0LjUybXMgICAzLjk1bXMgICAzMC4zMG1z ICA0Ljk0bXMgICA3OC45NG1zDQo+PiAgNDAgcnVsZXMgIDIuODNtcyAgIDQuOTdtcyAgIDQuMjNt cyAgIDMyLjE2bXMgIDUuNDBtcyAgIDgxLjg4bXMNCj4+ICA1MCBydWxlcyAgMy4wMG1zICAgNS4z MG1zICAgNC44NG1zICAgMzMuNDltcyAgNS43OW1zICAgODMuMjBtcw0KPj4gMTAwIHJ1bGVzICA0 LjI0bXMgICA5Ljc1bXMgICA3LjQybXMgICAzNy42OG1zICA2LjU1bXMgICA5My43MG1zDQo+PiAx NjAgcnVsZXMgIDUuNTBtcyAgIDE2Ljg5bXMgIDEyLjE4bXMgIDUxLjUzbXMgIDE3LjQ1bXMgIDE1 NS40MG1zDQo+Pg0KPj4gQWZ0ZXIgdGhpcyBvcHRpbWl6YXRpb246DQo+Pg0KPj4gICAgICAgICAg ICAgIG51bGwgICAgIHJlYWQgICAgd3JpdGUgICAgIHN0YXQgICAgZnN0YXQgICAgICBvcGVuDQo+ PiAgIDAgcnVsZXMgIDEuODFtcyAgIDIuODRtcyAgIDIuNDJtcyAgMjcuNzBtcyAgIDQuMTVtcyAg IDY5LjEwbXMNCj4+ICAxMCBydWxlcyAgMS45N21zICAgMi44M21zICAgMi42OW1zICAyNy43MG1z ICAgNC4xNW1zICAgNjkuMzBtcw0KPj4gIDIwIHJ1bGVzICAxLjcybXMgICAyLjkxbXMgICAyLjQx bXMgIDI2LjQ5bXMgICAzLjkxbXMgICA3MS4xOW1zDQo+PiAgMzAgcnVsZXMgIDEuODVtcyAgIDIu OTRtcyAgIDIuNDhtcyAgMjYuMjdtcyAgIDMuOTdtcyAgIDcxLjQzbXMNCj4+ICA0MCBydWxlcyAg MS44OG1zICAgMi45NG1zICAgMi43OG1zICAyNi44NW1zICAgNC4wOG1zICAgNjkuNzltcw0KPj4g IDUwIHJ1bGVzICAxLjg2bXMgICAzLjE3bXMgICAzLjA4bXMgIDI2LjI1bXMgICA0LjAzbXMgICA3 Mi4zMm1zDQo+PiAxMDAgcnVsZXMgIDEuODRtcyAgIDMuMDBtcyAgIDIuODFtcyAgMjYuMjVtcyAg IDMuOThtcyAgIDcwLjI1bXMNCj4+IDE2MCBydWxlcyAgMS45Mm1zICAgMy4zMm1zICAgMy4wNm1z ICAyNi44MW1zICAgNC41N21zICAgNzEuNDFtcw0KPj4NCj4+IEFzIHRoZSByZXN1bHQgc2hvd24g YWJvdmUsIHRoZSBzeXNjYWxsIGxhdGVuY2llcyBpbmNyZWFzZSBhcyAgdGhlIA0KPj4gbnVtYmVy ICBvZiBydWxlcyBpbmNyZWFzZXMsIHdoaWxlIHdpdGggdGhlIHBhdGNoIHRoZSBsYXRlbmNpZXMg cmVtYWluIHN0YWJsZS4NCj4+ICBUaGlzIGNvdWxkIGhlbHAgd2hlbiBhIHVzZXIgYWRkcyBtYW55 IGF1ZGl0IHJ1bGVzIGZvciBwdXJwb3NlcyAoc3VjaCANCj4+IGFzICBhdHRhY2sgdHJhY2luZyBv ciBwcm9jZXNzIGJlaGF2aW9yIHJlY29yZGluZykgYnV0IHN1ZmZlcnMgZnJvbSBsb3cgIA0KPj4g cGVyZm9ybWFuY2UuDQo+DQo+SSBoYXZlIGdlbmVyYWwgY29uY2VybnMgYWJvdXQgdHJhZGluZyBt ZW1vcnkgYW5kIGNvbXBsZXhpdHkgZm9yIHBlcmZvcm1hbmNlIGdhaW5zLCBidXQgYmV5b25kIHRo YXQgdGhlIG51bWJlcnMgeW91IHBvc3RlZCBhYm92ZSBkb24ndCB5ZXQgbWFrZSBzZW5zZSB0byBt ZS4NCg0KVGhhbmtzIGZvciB5b3VyIHJlcGx5Lg0KDQpUaGUgbWVtb3J5IGNvc3Qgb2YgdGhpcyBw YXRjaCBpcyBsZXNzIHRoYW4gNEtCICgxODIwIGJ5dGVzIG9uIHg2NCBhbmQNCiAzNjQwIGJ5dGVz IG9uIGNvbXBhdGlibGUgeDg2XzY0KSB3aGljaCBpcyB0cml2aWFsIGluIG1hbnkgY2FzZXMuDQog QmVzaWRlcywgc3lzY2FsbHMgYXJlIGNhbGxlZCBmcmVxdWVudGx5IG9uIGEgc3lzdGVtIHNvIGEg c21hbGwNCiBvcHRpbWl6YXRpb24gY291bGQgYnJpbmcgYSBnb29kIGluY29tZS4NCg0KPldoeSBh cmUgdGhlIGxhdGVuY3kgaW5jcmVhc2VzIGR1ZSB0byBydWxlIGNvdW50IG5vdCBzaW1pbGFyIGFj cm9zcyB0aGUgZGlmZmVyZW50IHN5c2NhbGxzPyBGb3IgZXhhbXBsZSwgSSB3b3VsZCB0aGluayB0 aGF0IGlmIHRoZSBpbmNyZWFzZSBpbiBzeXNjYWxsIGxhdGVuY3kgd2FzID5kaXJlY3RseSBhdHRy aWJ1dGVkIHRvIHRoZSBhdWRpdCBydWxlIHByb2Nlc3NpbmcgdGhlbiB0aGUgaW5jcmVhc2Ugb24g dGhlICJvcGVuIiBzeXNjYWxsIHNob3VsZCBiZSBzaW1pbGFyIHRvIHRoYXQgb2YgdGhlICJudWxs IiBzeXNjYWxsLiAgSW4gb3RoZXIgcGhyYXNpbmcsIGlmIHdlID5jYW4gcHJvY2VzcyAxNjAgcnVs ZXMgaW4gfjRtcyBpbiB0aGUgIm51bGwiIGNhc2UsIHdoeSBkb2VzIGl0IHRha2UgdXMgfjg2bXMg aW4gdGhlICJvcGVuIiBjYXNlPw0KDQpBcyB0byB0aGUgdGVzdCByZXN1bHQsIHdlIGRpZCBzb21l IGludmVzdGlnYXRpb25zIGFuZCBjb25jbHVkZWQgdHdvDQogcmVhc29uczoNCjEuIFRoZSBjaG9z ZW4gcnVsZSBzZXRzIHdlcmUgbm90IHZlcnkgc3VpdGFibGUuIFRob3VnaCB0aGV5IHdlcmUgbm90 IGhpdA0KIGJ5IHN5c2NhbGxzIGJlaW5nIG1lYXN1cmVkLCBzb21lIG9mIHRoZW0gd2VyZSBoaXQg Ynkgb3RoZXIgcHJvY2Vzc2VzLA0KIHdoaWNoIHJlZHVjZWQgdGhlIHN5c3RlbSBwZXJmb3JtYW5j ZSBhbmQgYWZmZWN0ZWQgdGhlIHRlc3QgcmVzdWx0Ow0KMi4gVGhlIHJvdXRpbmUgb2YgbGF0X3N5 c2NhbGwgaXMgbXVjaCBtb3JlIGNvbXBsaWNhdGVkIHRoYW4gd2UgdGhvdWdodC4gSXQNCiBjYWxs ZWQgbWFueSBvdGhlciBzeXNjYWxscyBkdXJpbmcgdGhlIHRlc3QsIHdoaWNoIG1heSBjYXVzZSB0 aGUgcmVzdWx0DQogbm90IHRvIGJlIGxpbmVhci4NCg0KRHVlIHRvIHRoZSByZWFzb25zIGFib3Zl LCB3ZSBkaWQgYW5vdGhlciB0ZXN0LiBXZSBtb2RpZmllZCBhdWRpdCBydWxlIHNldHMNCiBhbmQg bWFkZSBzdXJlIHRoZXkgd291bGRuJ3QgYmUgaGl0IGF0IHJ1bnRpbWUuIFRoZW4sIHdlIGFkZGVk DQoga3RpbWVfZ2V0X3JlYWxfdHM2NCB0byBhdWRpdHNjLmMgdG8gcmVjb3JkIHRoZSB0aW1lIG9m IGV4ZWN1dGluZw0KIF9fYXVkaXRfc3lzY2FsbF9leGl0LiBXZSByYW4gInN0YXQiIHN5c2NhbGwg MTAwMDAgdGltZXMgZm9yIGVhY2ggcnVsZSBzZXQNCiBhbmQgcmVjb3JkZWQgdGhlIHRpbWUgaW50 ZXJ2YWwuIFRoZSByZXN1bHQgaXMgc2hvd24gYmVsb3c6DQoNCkJlZm9yZSB0aGlzIG9wdGltaXph dGlvbjoNCg0KcnVsZSBzZXQgICAgICAgICAgdGltZQ0KICAwIHJ1bGVzICAgICAzODQzLjk2bnMN CiAgMSBydWxlcyAgICAxMzExOS4wOG5zDQogMTAgcnVsZXMgICAgMTQwMDMuMTNucw0KIDIwIHJ1 bGVzICAgIDE1NDIwLjE4bnMNCiAzMCBydWxlcyAgICAxNzI4NC44NG5zDQogNDAgcnVsZXMgICAg MTkwMTAuNjducw0KIDUwIHJ1bGVzICAgIDIxMTEyLjYzbnMNCjEwMCBydWxlcyAgICAyNTgxNS4w Mm5zDQoxMzAgcnVsZXMgICAgMjk0NDcuMDlucw0KDQpBZnRlciB0aGlzIG9wdGltaXphdGlvbjoN Cg0KIHJ1bGUgc2V0ICAgICAgICAgIHRpbWUNCiAgMCBydWxlcyAgICAgMzU5Ny43OG5zDQogIDEg cnVsZXMgICAgMTM0OTguNzNucw0KIDEwIHJ1bGVzICAgIDEzMTIyLjU3bnMNCiAyMCBydWxlcyAg ICAxMjg3NC44OG5zDQogMzAgcnVsZXMgICAgMTQzNTEuOTlucw0KIDQwIHJ1bGVzICAgIDE0MTgx LjA3bnMNCiA1MCBydWxlcyAgICAxMzgwNi40NW5zDQoxMDAgcnVsZXMgICAgMTM4OTAuODVucw0K MTMwIHJ1bGVzICAgIDE0NDQxLjQ1bnMNCg0KQXMgdGhlIHJlc3VsdCBzaG93ZWQsIHRoZSBpbnRl cnZhbCBpcyBsaW5lYXJseSBpbmNyZWFzZWQgYmVmb3JlDQogb3B0aW1pemF0aW9uIHdoaWxlIHRo ZSBpbnRlcnZhbCByZW1haW5zIHN0YWJsZSBhZnRlciBvcHRpbWl6YXRpb24uIE5vdGUgDQogdGhh dCBhdWRpdCBza2lwcyBzb21lIG9wZXJhdGlvbnMgaWYgdGhlcmUgYXJlIG5vIHJ1bGVzLCBzbyB0 aGVyZSBpcyBhIGdhcA0KIGJldHdlZW4gMCBydWxlIGFuZCAxIHJ1bGUgc2V0Lg0K