audit_set_rate_limit






audit_set_rate_limit − Set audit rate limit



#include<libaudit.h>

int audit_set_rate_limit (int fd, int limit);




audit_set_rate_limit will set the maximum number of messages
that the kernel will send per second. This can be used to
throttle the rate if systems become unresponsive. Of course
the trade off is that events will be dropped. The default
value is 0, meaning no limit.





     The return value is <= 0 on error, otherwise it is the
netlink sequence id number. This function can have any error
that sendto would encounter.




audit_open(3), auditd(8)


Steve Grubb