From 421589285fa61717a83c3f4a2bb104c5a11b3dc1e948e2886ac61de1acccb1c2 Mon Sep 17 00:00:00 2001 From: "Marc S. Weidner" Date: Sun, 7 Jun 2026 10:59:37 +0100 Subject: [PATCH] V9.14.018.2026.06.07 Signed-off-by: Marc S. Weidner --- config/hooks/live/9996_auditd.chroot | 4 ++-- docs/CHANGELOG.md | 1 + 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/config/hooks/live/9996_auditd.chroot b/config/hooks/live/9996_auditd.chroot index 42572f4..ed68497 100644 --- a/config/hooks/live/9996_auditd.chroot +++ b/config/hooks/live/9996_auditd.chroot @@ -42,13 +42,13 @@ cat << EOF >| /etc/audit/rules.d/00-base-config.rules ## Increase the buffers to survive stress events. ## Make this bigger for busy systems. --b 16384 +-b 262144 ## Rate Limit. Cap kernel->userspace message rate (0 = unlimited). -r 200 ## This determine how long to wait in burst of events. How long to wait in bursts (us). ---backlog_wait_time 1024 +--backlog_wait_time 16384 ## Set failure mode to syslog. -f 1 diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index 2654e0b..6ee94aa 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -24,6 +24,7 @@ include_toc: true * **Changed**: [9999_cdi_starter.sh](../scripts/usr/local/sbin/9999_cdi_starter.sh) Fixed: ``sysctl -p /etc/sysctl.d/90-ciss-local.hardened`` * **Changed**: [0042_ciss_post_decrypt_attest](../config/includes.chroot/usr/lib/live/boot/0042_ciss_post_decrypt_attest) Fixed: Signature checksum verification. * **Changed**: [0024-ciss-crypt-squash](../config/includes.chroot/usr/lib/live/boot/0024-ciss-crypt-squash) Added: ``ensure_minimal_dev_nodes()`` +* **Changed**: [9996_auditd.chroot](../config/hooks/live/9996_auditd.chroot) Unified with Kernel command line options: ``-b 262144`` ## V9.14.016.2026.06.06 * **Changed**: [zzzz_ciss_uki_build.hook.binary](../config/hooks/live/zzzz_ciss_uki_build.hook.binary)