On Mon, 2005-05-02 at 16:01 -0400, Stephen Smalley wrote:
On Mon, 2005-05-02 at 14:59 -0500, Klaus Weidner wrote:
> The memory pressure issue does need to be solved, it's not acceptable
> that file audit gets disabled when memory is running low.
Right, so auditfs needs to hold a reference to the dentry from the time
the watch is inserted, right? Thereby pinning it and the associated
inode in memory?
OK, I'll incorporate this with Steve's other suggestions this evening.
<snip>
-tim