From mboxrd@z Thu Jan  1 00:00:00 1970
From: Nikola Ciprich <extmaillist@linuxbox.cz>
Subject: auditd 1.7.11 memory leak
Date: Tue, 24 Feb 2009 15:02:52 +0100
Message-ID: <20090224140251.GB14730@develbox.linuxbox.cz>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Return-path: <linux-audit-bounces@redhat.com>
Received: from mx1.redhat.com (mx1.redhat.com [172.16.48.31])
	by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id n1OE0vBW032742
	for <linux-audit@redhat.com>; Tue, 24 Feb 2009 09:00:57 -0500
Received: from develbox.linuxbox.cz (gw3.lbox.cz [62.245.111.133])
	by mx1.redhat.com (8.13.8/8.13.8) with ESMTP id n1OE0iXM008677
	for <linux-audit@redhat.com>; Tue, 24 Feb 2009 09:00:44 -0500
Content-Disposition: inline
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: linux-audit@redhat.com
Cc: nikola.ciprich@linuxbox.cz
List-Id: linux-audit@redhat.com

Hi,
I noticed huge memory leak in auditd. If it's configured to NOT log any messages
(log_format = NOLOG), thus logging only via audisp plugins, its memory consumption starts
to grow. Running kernel compilations on system logging few system calls causes auditd memory
usage to grow over fer hundreds of MB in matter of tens of seconds...
I can provide more information if needed...
regards
nik


-- 
-------------------------------------
Nikola CIPRICH
LinuxBox.cz, s.r.o.
28. rijna 168, 709 01 Ostrava

tel.:   +420 596 603 142
fax:    +420 596 621 273
mobil:  +420 777 093 799
www.linuxbox.cz

mobil servis: +420 737 238 656
email servis: servis@linuxbox.cz
-------------------------------------