> On 09 Jan 2016, at 20:05, Lev Serebryakov <[email protected]> wrote:
> 
> I have this:
> 
> expire-after:356d AND 5G
> 
> and now my /var/audit contains 1 year of files, but it takes 105
> gigabytes (!).
> 
> It is FreeBSD 10.2-STABLE r286784

I don't recall how that limit is implemented, but it could be related to this:

https://www.freebsd.org/security/advisories/FreeBSD-EN-15:19.kqueue.asc

Terje

_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"

Reply via email to