Key based rate limiter (audit_set_rate_limit)
Anurag Aggarwal
anurag19aggarwal at gmail.com
Wed Mar 8 11:53:39 UTC 2023
>
>
> Limiting of audit records is actually done in the kernel, and
> currently the rate limit applies equally[1] to all records, there is
> no ability to enforce limits per-key.
One question Paul, will it be ok, if we contribute something similar to the
Auditd Kernel repository?
--
Anurag Aggarwal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20230308/54088d9d/attachment.htm>
More information about the Linux-audit
mailing list