* how costly is flush = sync vs incremental?
@ 2015-10-19 18:57 Bond Masuda
0 siblings, 0 replies; only message in thread
From: Bond Masuda @ 2015-10-19 18:57 UTC (permalink / raw)
To: linux-audit
i'm trying to figure out how costly it is to set flush=sync vs
incremental in auditd.conf. In theory, it would seem like it is more
expensive, but by how much? At what level of paranoia about not losing
audit logs does it make sense to use flush=sync or is it not much more
costly and one might as well use that setting?
Thoughts?
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2015-10-19 18:57 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-10-19 18:57 how costly is flush = sync vs incremental? Bond Masuda
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.