Re: kauditd hold queue overflow in 4.11

2017-09-09 Thread Steve Grubb
On Saturday, September 9, 2017 4:41:19 PM EDT Laurent Bigonville wrote: > Le 09/09/17 à 16:22, Steve Grubb a écrit : > > On Saturday, September 9, 2017 6:02:02 AM EDT Laurent Bigonville wrote: > >> Le 11/07/17 à 00:23, Paul Moore a écrit : > >>> On Mon, Jul 10, 2017 at 4:01 PM, Laurent Bigonville

Re: kauditd hold queue overflow in 4.11

2017-09-09 Thread Laurent Bigonville
Le 09/09/17 à 16:22, Steve Grubb a écrit : On Saturday, September 9, 2017 6:02:02 AM EDT Laurent Bigonville wrote: Le 11/07/17 à 00:23, Paul Moore a écrit : On Mon, Jul 10, 2017 at 4:01 PM, Laurent Bigonville wrote: Le 10/07/17 à 18:00, Paul Moore a écrit : On Mon, Jul

Re: kauditd hold queue overflow in 4.11

2017-09-09 Thread Paul Moore
On Sat, Sep 9, 2017 at 6:02 AM, Laurent Bigonville wrote: > Le 11/07/17 à 00:23, Paul Moore a écrit : >> >> On Mon, Jul 10, 2017 at 4:01 PM, Laurent Bigonville >> wrote: >>> >>> Le 10/07/17 à 18:00, Paul Moore a écrit : >>> On Mon, Jul 10, 2017 at 10:59

Re: kauditd hold queue overflow in 4.11

2017-09-09 Thread Steve Grubb
On Saturday, September 9, 2017 6:02:02 AM EDT Laurent Bigonville wrote: > Le 11/07/17 à 00:23, Paul Moore a écrit : > > On Mon, Jul 10, 2017 at 4:01 PM, Laurent Bigonville wrote: > >> Le 10/07/17 à 18:00, Paul Moore a écrit : > >>> On Mon, Jul 10, 2017 at 10:59 AM, Laurent

Re: kauditd hold queue overflow in 4.11

2017-09-09 Thread Laurent Bigonville
Le 11/07/17 à 00:23, Paul Moore a écrit : On Mon, Jul 10, 2017 at 4:01 PM, Laurent Bigonville wrote: Le 10/07/17 à 18:00, Paul Moore a écrit : On Mon, Jul 10, 2017 at 10:59 AM, Laurent Bigonville wrote: Hi, With 4.11.6 (that has been uploaded in debian

Re: kauditd hold queue overflow in 4.11

2017-07-10 Thread Paul Moore
On Mon, Jul 10, 2017 at 4:01 PM, Laurent Bigonville wrote: > Le 10/07/17 à 18:00, Paul Moore a écrit : > >> On Mon, Jul 10, 2017 at 10:59 AM, Laurent Bigonville >> wrote: >>> >>> Hi, >>> >>> With 4.11.6 (that has been uploaded in debian unstable) I get a lot

Re: kauditd hold queue overflow in 4.11

2017-07-10 Thread Laurent Bigonville
Le 10/07/17 à 18:00, Paul Moore a écrit : On Mon, Jul 10, 2017 at 10:59 AM, Laurent Bigonville wrote: Hi, With 4.11.6 (that has been uploaded in debian unstable) I get a lot of messages in dmesg like [100052.120468] audit: audit_lost=66041 audit_rate_limit=0

Re: kauditd hold queue overflow in 4.11

2017-07-10 Thread Paul Moore
On Mon, Jul 10, 2017 at 10:59 AM, Laurent Bigonville wrote: > Hi, > > With 4.11.6 (that has been uploaded in debian unstable) I get a lot of > messages in dmesg like > > [100052.120468] audit: audit_lost=66041 audit_rate_limit=0 > audit_backlog_limit=8192 > [100052.120470]

kauditd hold queue overflow in 4.11

2017-07-10 Thread Laurent Bigonville
Hi, With 4.11.6 (that has been uploaded in debian unstable) I get a lot of messages in dmesg like [100052.120468] audit: audit_lost=66041 audit_rate_limit=0 audit_backlog_limit=8192 [100052.120470] audit: kauditd hold queue overflow And it also seems that the messages are not stored in