[PATCH v2] audit: Only use the syscall slowpath when syscall audit rules exist

This toggles TIF_SYSCALL_AUDIT as needed when rules change instead of leaving it set whenever rules might be set in the future. This reduces syscall latency from >60ns to closer to 40ns on my laptop. Cc: Oleg Nesterov Cc: Steve Grubb Cc: Eric Paris Signed-off-by: Andy Lutomirski --- Changes

[PATCH v2] audit: Only use the syscall slowpath when syscall audit rules exist

This toggles TIF_SYSCALL_AUDIT as needed when rules change instead of leaving it set whenever rules might be set in the future. This reduces syscall latency from 60ns to closer to 40ns on my laptop. Cc: Oleg Nesterov o...@redhat.com Cc: Steve Grubb sgr...@redhat.com Cc: Eric Paris