[PATCH] Make "none" the default setting for vfs_full_audit

Timur I. Bakeyev timur at freebsd.org
Mon Jul 2 02:34:12 UTC 2018


This patch is a suggestion to change the default behavior of the
vfs_full_audit.

Currently, by just adding the module to the list of VFS objects you enable
auditing of ALL operations. We've observed with our end users that this
almost instantly brings even moderately loaded server to it's knees.

So, proposed patch turns off auditing of both successful and failed
operations by default. It's still possible to audit ALL the operations by
specifying "all" keyword, but practice shows that it's a bad idea unless
you are doing it in the controlled test environment.

With best regards,
Timur Bakeyev.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-vfs_full_audit-moot.patch
Type: application/octet-stream
Size: 2782 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20180702/dbf393cb/0001-vfs_full_audit-moot.obj>


More information about the samba-technical mailing list