WebOct 21, 2016 · Sending audit netlink multicast messages is bad for all the same reasons that sending audit netlink unicast messages is bad, so this patch reworks things so that we … * kauditd_thread - Worker thread to send audit records to userspace * @dummy: unused */ static int kauditd_thread(void *dummy) {int rc; u32 portid = 0; struct net *net = NULL; struct sock *sk = NULL; struct auditd_connection *ac; #define UNICAST_RETRIES 5: set_freezable(); while (!kthread_should_stop())
RFE: perform the audit multicast send from the kauditd thread #23 - Github
WebJul 10, 2024 · > It seems to fix the main issue (all the audit messages being logged in > dmesg) but I can still see from time to time the following message: > > [ 14.747565] audit: audit_lost=59 audit_rate_limit=0 > audit_backlog_limit=64 > [ 14.747566] audit: kauditd hold queue overflow I agree with Steve, you might try increasing your backlog limit to see ... WebFeb 7, 2024 · - kauditd_send_queue() is now limited to looping through the passed queue only once per call. This not only prevents the function from looping indefinitely when … n-1とは
LKML: Greg Kroah-Hartman: [PATCH 5.4 01/44] audit: improve …
WebJesper Juhl wrote: >kauditd_thread() is being used in a call to kthread_run(). kthread_run() >expects a function returning 'int' which is also how kauditd_thread() is >declared. Unfortunately kauditd_thread() neglects to return a value It is an infinite loop... >which >results in this complaint from gcc : WebJul 10, 2024 · Next message (by thread): kauditd hold queue overflow in 4.11 Messages sorted by: Hi, With 4.11.6 (that has been uploaded in debian unstable) I get a lot of messages in dmesg like [100052.120468] audit: audit_lost=66041 audit_rate_limit=0 audit_backlog_limit=8192 [100052.120470] audit: kauditd hold queue overflow And it also … Web- kauditd_task = kthread_run(kauditd_thread, NULL, "kauditd"); - if (IS_ERR(kauditd_task)) { - err = PTR_ERR(kauditd_task); - kauditd_task = NULL; - return err; seq = nlh->nlmsg_seq; data = nlmsg_data(nlh); @@ -1116,6 +1106,11 @@ static int __init audit_init(void) audit_enabled = audit_default; audit_ever_enabled = !!audit_default; n-1グランプリ 錦