* how costly is flush = sync vs incremental?
@ 2015-10-19 18:57 Bond Masuda
0 siblings, 0 replies; only message in thread
From: Bond Masuda @ 2015-10-19 18:57 UTC (permalink / raw)
To: linux-audit
i'm trying to figure out how costly it is to set flush=sync vs
incremental in auditd.conf. In theory, it would seem like it is more
expensive, but by how much? At what level of paranoia about not losing
audit logs does it make sense to use flush=sync or is it not much more
costly and one might as well use that setting?
Thoughts?
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2015-10-19 18:57 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-10-19 18:57 how costly is flush = sync vs incremental? Bond Masuda
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).