• David Woodhouse's avatar
    AUDIT: Wait for backlog to clear when generating messages. · 9ad9ad38
    David Woodhouse authored
    
    
    Add a gfp_mask to audit_log_start() and audit_log(), to reduce the
    amount of GFP_ATOMIC allocation -- most of it doesn't need to be 
    GFP_ATOMIC. Also if the mask includes __GFP_WAIT, then wait up to
    60 seconds for the auditd backlog to clear instead of immediately 
    abandoning the message. 
    
    The timeout should probably be made configurable, but for now it'll 
    suffice that it only happens if auditd is actually running.
    Signed-off-by: default avatarDavid Woodhouse <dwmw2@infradead.org>
    9ad9ad38
auditsc.c 32 KB