[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#693568: linux-image-3.6-trunk-amd64: audit subsystem is far too chatty



On Sun, Nov 18, 2012 at 12:36:44PM +0100, Bastian Blank wrote:
> On Sat, Nov 17, 2012 at 11:05:56PM +0000, brian m. carlson wrote:
> > As you can see in the logs below, the audit subsystem logs entirely too
> > many audit messages.
> 
> It is rate limited. And one event every 30 seconds is not that much.

I opened this at normal severity because it is rate-limited.  If it were
not, it would have been much worse.  I still feel that potentially 2880
messages per day is too many for the kernel log without some sort of
mechanism to disable the flow.

> >                                                Since I use chrome, which
> > uses seccomp (apparently), this makes lots of useless noise in the logs,
> 
> Chrome is not supported by Debian. Chromium is and does not show this
> behaviour in the latest available packages.

That's because you're shipping version 22.  Version 23 starts sandboxing
all renderer processes, so you'll start seeing the bug soon enough.

-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 832 623 2791 | http://www.crustytoothpaste.net/~bmc | My opinion only
OpenPGP: RSA v4 4096b: 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187

Attachment: signature.asc
Description: Digital signature


Reply to: