From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: [PATCH] audit: allow unlimited backlog queue Date: Wed, 15 Jan 2014 12:24:04 -0500 Message-ID: <1459080.Bs1WkWcKGH@x2> References: <1389740356-18867-1-git-send-email-rgb@redhat.com> <22062657.DxdUxBxj9N@x2> <20140115171228.GF23247@madcap2.tricolour.ca> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <20140115171228.GF23247@madcap2.tricolour.ca> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Richard Guy Briggs Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Wednesday, January 15, 2014 12:12:28 PM Richard Guy Briggs wrote: > > > Eric and I discussed bumping up the default. I would have liked to have > > > seen somewhere between 320 and 512, but that default would make the > > > embedded folks unhappy and I don't really want to get into the more > > > complex idea of having it guess what type of system it is trying to > > > configure to give a smaller number for embedded systems (which aren't > > > all small) and bigger ones to servers (which aren't all big). > > > > What about making it a compile time choice in the kernel config? I > > suggested making a compile time option, distributions can bump that up > > to 512, the default is enough and it can be tuned. Embedded can make the > > default whatever they want, too. > > Eric and I had discussed that too, and I understand there is > considerable pushback to adding to kconfig, so that option would be > harder to get accepted. So how does making the backlog value of 0 be unlimited solve the problem? -Steve