[PATCH] audit: allow unlimited backlog queue

Steve Grubb sgrubb at redhat.com
Wed Jan 15 12:53:26 UTC 2014


On Tuesday, January 14, 2014 05:59:16 PM Richard Guy Briggs wrote:
> Since audit can already be disabled by "audit=0" on the kernel boot line, or
> by the command "auditctl -e 0", it would be more useful to have the
> audit_backlog_limit set to zero mean effectively unlimited (limited only by
> system resources).

I don't see a useful purpose to this.

-Steve




More information about the Linux-audit mailing list