Re: [PATCH v2] audit: report audit wait metric in audit status reply

2020-12-07 Thread Max Englander
at scenario, or good questionsit is what occurs > to me at the moment. > > Thank you. > > R, > -Joe Wulf > > > On Wednesday, July 1, 2020, 5:33:14 PM EDT, Max Englander < > max.englan...@gmail.com> wrote: > > > In environments

Re: [PATCH v2] audit: report audit wait metric in audit status reply

2020-12-07 Thread Max Englander
On Mon, Dec 7, 2020 at 4:21 PM Richard Guy Briggs wrote: > On 2020-12-07 16:13, Max Englander wrote: > > On Fri, Dec 4, 2020 at 3:41 PM Paul Moore wrote: > > > > > On Thu, Dec 3, 2020 at 9:47 PM Steve Grubb wrote: > > > > On Thursday, December 3,

Re: [PATCH v2] audit: report audit wait metric in audit status reply

2020-12-07 Thread Max Englander
On Fri, Dec 4, 2020 at 3:41 PM Paul Moore wrote: > On Thu, Dec 3, 2020 at 9:47 PM Steve Grubb wrote: > > On Thursday, December 3, 2020 9:16:52 PM EST Paul Moore wrote: > > > > > > Author: Richard Guy Briggs > > > > > > AuthorDate: 2014-11-17 15:51:01 -0500 > > > > > > Commit: Paul

Re: [PATCH v3] audit: report audit wait metric in audit status reply

2020-07-21 Thread Max Englander
On Tue, Jul 21, 2020 at 11:26:53AM -0400, Paul Moore wrote: > On Wed, Jul 15, 2020 at 9:30 PM Paul Moore wrote: > > On Wed, Jul 8, 2020 at 7:13 PM Paul Moore wrote: > > > On Sat, Jul 4, 2020 at 11:15 AM Max Englander > > > wrote: > > > > > > > &

[PATCH v3] audit: report audit wait metric in audit status reply

2020-07-04 Thread Max Englander
-audit/audit-userspace/pull/134 - https://github.com/linux-audit/audit-testsuite/pull/97 Signed-off-by: Max Englander --- Patch changelogs between v1 and v2: - Instead of printing a warning when backlog waiting occurs, add duration of backlog waiting to cumulative sum, and report this sum

Re: [PATCH v2] audit: report audit wait metric in audit status reply

2020-07-03 Thread Max Englander
On Fri, Jul 03, 2020 at 05:29:49PM -0400, Richard Guy Briggs wrote: > On 2020-07-02 16:42, Paul Moore wrote: > > On Wed, Jul 1, 2020 at 5:32 PM Max Englander > > wrote: > > > > > > In environments where the preservation of audit events and predictable > > &

Re: [PATCH v2] audit: report audit wait metric in audit status reply

2020-07-03 Thread Max Englander
On Thu, Jul 02, 2020 at 04:42:13PM -0400, Paul Moore wrote: > On Wed, Jul 1, 2020 at 5:32 PM Max Englander wrote: > > > > In environments where the preservation of audit events and predictable > > usage of system memory are prioritized, admins may use a combination of &g

[PATCH v2] audit: report audit wait metric in audit status reply

2020-07-01 Thread Max Englander
. Add to this field the total time spent by the current task on scheduled timeouts while the backlog limit is exceeded. Tested on Ubuntu 18.04 using complementary changes to the audit userspace: https://github.com/linux-audit/audit-userspace/pull/134. Signed-off-by: Max Englander --- Patch

Re: [PATCH] audit: optionally print warning after waiting to enqueue record

2020-06-24 Thread Max Englander
On Tue, Jun 23, 2020 at 08:15:59PM -0400, Paul Moore wrote: > On Thu, Jun 18, 2020 at 8:30 PM Richard Guy Briggs wrote: > > On 2020-06-18 23:48, Max Englander wrote: > > > In case you’re any more receptive to the idea, I thought I’d mention > > > that the need this pa

Re: [PATCH] audit: optionally print warning after waiting to enqueue record

2020-06-18 Thread Max Englander
On Wed, Jun 17, 2020 at 09:06:27PM -0400, Paul Moore wrote: > On Wed, Jun 17, 2020 at 6:54 PM Max Englander wrote: > > On Wed, Jun 17, 2020 at 02:47:19PM -0400, Paul Moore wrote: > > > On Tue, Jun 16, 2020 at 12:58 AM Max Englander > > > wrote: > > > >

Re: [PATCH] audit: optionally print warning after waiting to enqueue record

2020-06-18 Thread Max Englander
On Thu, Jun 18, 2020 at 09:39:08AM -0400, Steve Grubb wrote: > On Wednesday, June 17, 2020 6:54:16 PM EDT Max Englander wrote: > > On Wed, Jun 17, 2020 at 02:47:19PM -0400, Paul Moore wrote: > > > On Tue, Jun 16, 2020 at 12:58 AM Max Englander > wrote: > > > &g

Re: [PATCH] audit: optionally print warning after waiting to enqueue record

2020-06-17 Thread Max Englander
On Wed, Jun 17, 2020 at 02:47:19PM -0400, Paul Moore wrote: > On Tue, Jun 16, 2020 at 12:58 AM Max Englander > wrote: > > > > In environments where security is prioritized, users may set > > --backlog_wait_time to a high value in order to reduce the likelihood > >

[PATCH] audit: optionally print warning after waiting to enqueue record

2020-06-15 Thread Max Englander
ace/pull/131. Signed-off-by: Max Englander --- include/uapi/linux/audit.h | 7 ++- kernel/audit.c | 35 +++ 2 files changed, 41 insertions(+), 1 deletion(-) diff --git a/include/uapi/linux/audit.h b/include/uapi/linux/audit.h index a534d71e6