Backlog not working with kernel 3.10

Paul Moore paul at paul-moore.com
Wed Mar 17 19:46:00 UTC 2021


On Wed, Mar 17, 2021 at 4:41 AM Alan Evangelista <alan.vitor at gmail.com> wrote:
> PM> The audit queue mechanism (backlog) was pretty messed up in older
> kernels, and while we've fixed it in modern kernels, I believe that
> not all of the changes have been backported to the older distribution
> kernels.
>
> Do you know in which kernel version this mechanism was fixed?
> This information would help me decide which distro I should move to.

Ignoring any backporting that may have taken place, I believe all of
the critical patches were present in Linux v4.13 with a few
nice-to-have patches in v4.15.

-- 
paul moore
www.paul-moore.com




More information about the Linux-audit mailing list