The attached patch will allow the audit system to utilize 100mb for its logs, as opposed to 20mb. Due to the sheer number of SELinux denials that we're hitting on bastion (which will be resolved after a reboot, and my patches from the previous mail), bastion is only storing 1-2 days worth of audit logs.
This patch will only effect bastion, as it is currently the only machine that is configured with 'include prelude::sensor::audisp'
luke
Luke Macken wrote:
The attached patch will allow the audit system to utilize 100mb for its logs, as opposed to 20mb. Due to the sheer number of SELinux denials that we're hitting on bastion (which will be resolved after a reboot, and my patches from the previous mail), bastion is only storing 1-2 days worth of audit logs.
This patch will only effect bastion, as it is currently the only machine that is configured with 'include prelude::sensor::audisp'
We have the hard drive space on bastion for this.
+1
-Toshio
On 2008-11-21 04:17:11 PM, Luke Macken wrote:
The attached patch will allow the audit system to utilize 100mb for its logs, as opposed to 20mb. Due to the sheer number of SELinux denials that we're hitting on bastion (which will be resolved after a reboot, and my patches from the previous mail), bastion is only storing 1-2 days worth of audit logs.
This patch will only effect bastion, as it is currently the only machine that is configured with 'include prelude::sensor::audisp'
+1
Thanks, Ricky
infrastructure@lists.fedoraproject.org
-
Luke Macken -
Ricky Zhou -
Toshio Kuratomi