From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: need debug suggestions on system freeze
Date: Fri, 9 May 2008 16:17:48 -0400
Message-ID: <200805091617.48495.sgrubb@redhat.com>
References: <1210363125.7060.72.camel@homeserver>
Mime-Version: 1.0
Content-Type: text/plain;
  charset="utf-8"
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <1210363125.7060.72.camel@homeserver>
Content-Disposition: inline
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

On Friday 09 May 2008 15:58:45 LC Bruzenak wrote:
> I need some suggestions for debugging an issue I'm having.
> I have a Dell Vostro laptop I've been using successfully for a while
> (details below). It has some user apps running but doesn't seem
> overburdened. I am running mls policy in permissive mode.

I don't know what is causing the lockups, but the overflowing queue is a 
priority problem. I've found that I need at least -8 priority boost for the 
audispd daemon to stay ahead of auditd.

I just released a new audit package that allows setting separate auditd and 
audispd priorities. In the meantime, you can "renice -8 -p <pid>" for audispd 
and see if that doesn't fix the main problem.

-Steve