On 04/24/2015 12:33 PM, Stephen Smalley wrote: > On 04/24/2015 12:30 PM, Spector, Aaron wrote: >> Correct, I'm not running auditd. >> >> Is it worth removing the printk_ratelimit call in audit_printk_skb() in audit.c for experimentation purposes? Just let it printk all the audits and if it rolls over, oh well? > > Sure. We actually do that in our kernel trees for Android policy development, e.g. https://bitbucket.org/seandroid/kernel-msm/commits/0388e1630648c481e42929135babb1dbba272e27 _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
