RHEL-AS-4.4 and auditd-1.0.14

Steve Grubb sgrubb at redhat.com
Tue Feb 13 02:33:53 UTC 2007


On Monday 12 February 2007 17:54, Simon Jones wrote:
> I loaded just the rules and left it overnight and it still looks fine.
>
> size-32             3688   3808     32  119    1 : tunables  120    
> 60    8 : slabdata     32     32      0

Hmm...that would seem to point to the audit daemon. I posted the code for the 
1.0.15 audit package here:

http://people.redhat.com/sgrubb/audit/audit-1.0.15-1.fc4.src.rpm

Maybe you want to build that and give it a try? I'd be curious if you see a 
leak in that version. It does have some cleanups, but nothing I recall as 
fixing a memory leak.

-Steve




More information about the Linux-audit mailing list