[PATCH] Make "none" the default setting for vfs_full_audit
Andrew Bartlett
abartlet at samba.org
Wed Jul 4 09:32:49 UTC 2018
On Mon, 2018-07-02 at 04:34 +0200, Timur I. Bakeyev via samba-technical
wrote:
> This patch is a suggestion to change the default behavior of the
> vfs_full_audit.
>
> Currently, by just adding the module to the list of VFS objects you enable
> auditing of ALL operations. We've observed with our end users that this
> almost instantly brings even moderately loaded server to it's knees.
>
> So, proposed patch turns off auditing of both successful and failed
> operations by default. It's still possible to audit ALL the operations by
> specifying "all" keyword, but practice shows that it's a bad idea unless
> you are doing it in the controlled test environment.
This seems reasonable, and matches what is used in make test.
Can you humour me with a gitlab CI run please?
Assuming that passes and you can include a patch to WHATSNEW.txt
explaining the change:
Reviewed-by: Andrew Bartlett <abartlet at samba.org>
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
More information about the samba-technical
mailing list