audit_memory_usage.5 (2010 09)

audit_memory_usage(5) audit_memory_usage(5)

(Tunable Kernel Parameters)

NAME

audit_memory_usage - percentage of physical memory that can be used by audit subsystem

VALUES

Failsafe

Default

Allowed values

1-10

Recommended values

DESCRIPTION

The tunable audit_memory_usage

deﬁnes the percentage of physical memory that can be used by

audit records. If the audit record memory usage exceeds the

audit_memory_usage

limit, the audit

subsystem blocks the system call until memory usage comes down inside the limit.

Who Is Expected to Change This Tunable?

Administrator with proper privileges can change the value of

audit_memory_usage.

Restrictions on Changing

This tunable value can be changed any time, as this is a dynamic tunable; but its value can not be

lowered below the memory currently used by the audit subsystem for records.

When Should the Value of This Tunable Be Raised?

When the system to be audited is critical and generates many records.

What are the Side Effects of Raising the Value?

If the system is generating great number of records, and the value is raised, then it can create a lot of

unﬂushed memory and might slow down the system.

When Should the Value of This Tunable Be Lowered?

When the audit subsystem is not generating many records.

What are the Side Effects of Lowering the Value?

If many audit records are generated, then the auditing subsystem might block the system call.

What Other Tunable Values Should Be Changed at the Same Time?

None.

WARNINGS

All HP-UX kernel tunable parameters are release speciﬁc. This parameter may be removed or have its

meaning changed in future releases of HP-UX.

Installation of optional kernel software, from HP or other vendors, may cause changes to tunable parame-

ter values. After installation, some tunable parameters may no longer be at the default or recommended

values. For information about the effects of installation on tunable values, consult the documentation for

the kernel software being installed. For information about optional kernel software that was factory

installed on your system, see HP-UX Release Notes at

http://www.hp.com/go/hpux-core-docs

AUTHOR

audit_memory_usage was developed by HP.