Re: [PATCH ghak90 V8 14/16] audit: check contid depth and add limit config param

Clamp the depth of audit container identifier nesting to limit the netlink and disk bandwidth used and to prevent losing information from record text size overflow in the contid field. Add a configuration parameter AUDIT_STATUS_CONTID_DEPTH_LIMIT (0x80) to set the audit container identifier depth limit. This can be used to prevent overflow of the contid field in CONTAINER_OP and CONTAINER_ID messages, losing information, and to limit bandwidth used by these messages. Signed-off-by: Richard Guy Briggs <rgb(a)redhat.com&gt; --- include/uapi/linux/audit.h | 2 ++ kernel/audit.c | 46 ++++++++++++++++++++++++++++++++++++++++++++++ kernel/audit.h | 2 ++ 3 files changed, 50 insertions(+)