Re: [PATCH] audit: add backlog high water mark metric

From: Paul Moore

Date: Wed Apr 15 2026 - 11:19:50 EST


On Tue, Apr 14, 2026 at 11:45 PM Steve Grubb <sgrubb@xxxxxxxxxx> wrote:
> On Friday, April 10, 2026 5:34:08 PM Eastern Daylight Time Paul Moore wrote:
> > On Mon, Mar 23, 2026 at 11:07 AM Ricardo Robaina <rrobaina@xxxxxxxxxx>
> wrote:
>

...

> ... compliance-driven systems that must use a finite backlog limit for memory safety but cannot tolerate dropped events ...

You must pick one of those two requirements, or at the very least
prioritize them; it is simply impossible to both limit the backlog
queue and require zero dropped events.

--
paul-moore.com