Re: [PATCH] audit: add backlog high water mark metric
Paul Moore <[email protected]> Wed, 15 Apr 2026 11:19:23 -0400
| Newsgroups | org.kernel.vger.audit,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <CAHC9VhSVhN8YW_p4NOS4ptRDjimP9sg5bcg3dH24sDoaTefUUw@mail.gmail.com> |
On Tue, Apr 14, 2026 at 11:45 PM Steve Grubb <[email protected]> wrote: > On Friday, April 10, 2026 5:34:08 PM Eastern Daylight Time Paul Moore wrote: > > On Mon, Mar 23, 2026 at 11:07 AM Ricardo Robaina <[email protected]> > wrote: > ... > ... compliance-driven systems that must use a finite backlog limit for memory safety but cannot tolerate dropped events ... You must pick one of those two requirements, or at the very least prioritize them; it is simply impossible to both limit the backlog queue and require zero dropped events. -- paul-moore.com