Re: Key based rate limiter (audit_set_rate_limit)
Anurag Aggarwal <[email protected]> Wed, 8 Mar 2023 17:23:39 +0530
| Newsgroups | com.redhat.linux-audit |
|---|---|
| Message-ID | <CAPoNrtvt_RZfPYLAWdPp6gTu_67f1RzOz3s4T62SdoG4ryyzGw@mail.gmail.com> |
> > > Limiting of audit records is actually done in the kernel, and > currently the rate limit applies equally[1] to all records, there is > no ability to enforce limits per-key. One question Paul, will it be ok, if we contribute something similar to the Auditd Kernel repository? -- Anurag Aggarwal -- Linux-audit mailing list [email protected] https://listman.redhat.com/mailman/listinfo/linux-audit