diff options
| author | Nick Kralevich <nnk@google.com> | 2015-05-09 12:36:18 -0700 |
|---|---|---|
| committer | Nick Kralevich <nnk@google.com> | 2015-05-11 15:43:25 -0700 |
| commit | 6de7a06afb3f70abe1517fc55efd1a11110e5197 (patch) | |
| tree | 4868f648d23fa1a0c71951855411f4ace7c0d492 | |
| parent | a51d8b9a1c06a17b8d5d5fd9547a3bf813ea4157 (diff) | |
| download | system_core-6de7a06afb3f70abe1517fc55efd1a11110e5197.zip system_core-6de7a06afb3f70abe1517fc55efd1a11110e5197.tar.gz system_core-6de7a06afb3f70abe1517fc55efd1a11110e5197.tar.bz2 | |
Revert "libaudit: limit to 5 selinux denials per sec"
The shamu instabilities continued even after throttling SELinux denials
to 5/second. 5 denials per second is too low when doing device bringup,
and there have been some complaints about lost SELinux denials. See,
for example, http://comments.gmane.org/gmane.comp.security.selinux/21941
Bring the limit back up to 20/second to prevent dropping too many
denials on the floor.
This reverts commit a15db51bbf961ff711d71c10d20e18ad2bfaef45.
(cherrypick of commit 9667a66019388fb09430d3f8896ccc531eb24ef5)
Change-Id: I05e85cce0a792d05aa557fcc614c0fc019c15014
| -rw-r--r-- | logd/libaudit.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/logd/libaudit.c b/logd/libaudit.c index cf76305..d00d579 100644 --- a/logd/libaudit.c +++ b/logd/libaudit.c @@ -177,7 +177,7 @@ int audit_setup(int fd, uint32_t pid) */ status.pid = pid; status.mask = AUDIT_STATUS_PID | AUDIT_STATUS_RATE_LIMIT; - status.rate_limit = 5; // audit entries per second + status.rate_limit = 20; // audit entries per second /* Let the kernel know this pid will be registering for audit events */ rc = audit_send(fd, AUDIT_SET, &status, sizeof(status)); |