On Wed, Aug 26, 2015 at 10:32 AM, Dominick Grift <dac.override@xxxxxxxxx> wrote: > ... I wish there were recordings of the various talk. You are not the first person to request recordings, I don't think anyone would be opposed to recording the sessions, but as usual it is a matter of resources. Perhaps we will be able to record the sessions in the future. > ... your talk about linux-audit is seems interesting and timely to me. > Especially Since we currently have two audit daemons in Fedora by default, > and people who actually use audit in a meaningful way know how io-intensive > it can be. Let alone logging everything twice... To be clear, we don't have two auditd instances running by default, we have one auditd instance and the systemd-journald service; although I admit this is a minor distinction from a performance point of view. I personally think that both solutions have merit for different reasons, but I agree that it is doubtful most users would want both running at the same time. I know we have a bugzilla open against the systemd journal to better handle auditing, although I haven't looked at it lately to see where things stand. Hopefully over the course of this next year you will start to see some internal improvements to audit which will pave the way for more visible functional and performance improvements. -- paul moore www.paul-moore.com _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
