Date: Sun, 10 Jan 2016 02:02:47 +0300 From: Lev Serebryakov <lev@FreeBSD.org> To: Terje Elde <terje@elde.net> Cc: freebsd-security@freebsd.org Subject: Re: Does audit_control's "expire-after" by size works? Message-ID: <161717037.20160110020240@serebryakov.spb.ru> In-Reply-To: <89CCB3E8-4E81-4673-B04B-E3B8A25CBE76@elde.net> References: <569159E6.1040206@FreeBSD.org> <89CCB3E8-4E81-4673-B04B-E3B8A25CBE76@elde.net>
next in thread | previous in thread | raw e-mail | index | archive | help
------------0890421E73412DA99 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Hello Terje, Saturday, January 9, 2016, 11:55:42 PM, you wrote: > I don't recall how that limit is implemented, but it could be related to = this: Looks like I could not understand man page right :) Expiration with AND is by time, and size is additional condition. So, "365 AND 5G" could leave any number of files, up to one year, if they takes morre than 5G and NOT "365 files but no more than 5G" --=20 Best regards, Lev mailto:lev@FreeBSD.org ------------0890421E73412DA99 Content-Type: application/pgp-signature -----BEGIN PGP MESSAGE----- Version: GnuPG v2.0.22 (MingW32) iQJ8BAEBCgBmBQJWkZGWXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRGOTZEMUNBMEI1RjQzMThCNjc0QjMzMEFF QUIwM0M1OEJGREM0NzhGAAoJEOqwPFi/3EePH94QAIt9Se4D551hXq4h6bl6Wi5j Ge8bP1EnjxlHSXJ137ZnTSWR5RWLHQlw2ZUoHwFhDRaMm14Of04lZCN5kE9DnD2i it7xxKFgLKvav1EONgVQ3coQdKliLW2DV4ZVXFrQhcL3cOWDg5DLlr/T0gD/VU/l gbRxkm2vF+nU5CaSc5sbL/dPd7idsPoGGzZQKW5M9rBBHqee9z6tbIWXAyOmyLg0 +2ev5VVG5IbFnzvihQD4BB1LL02RpwU0nVPhEhh18XuIeXxdTFNHZeWQr/Dk5PYT CNQ1xx/0uyk7KOOJrUvKQ5UZYZlk9Ies+aWF+9n9IHxg6LuVOKXCkPaH1AYuQFAp R12MNiOlWwjU2qLKd0n6qoUQa6HNM7pPt84Xt/+eO19/u2TVG+jdEoMqL+tZi/aA e6vc3a+PgR7wxcppCtHKo7JFexSQzbxDlcYcwOmWXH6Heg2zj3U1kn+DmzZ05M+A /bS/0TYuQOf17jW0cNlFOuh0WnEgb6muCOFA8KH4ld3hL2i9ilM328cZBu404lBA dz1m8oZY38tPekXHKvS1E9payjYoahGgNgiscuUUdAkCbuk2ptXIEZt12o+vmWyi zoxySIrrN0/dVwzW2fI3NDb71ULEQghF44eRvUj0Gm/n3Ff42e23pOHa3zJIB1oW uq0+7AUUnu/GcQAKh+HK =0v1d -----END PGP MESSAGE----- ------------0890421E73412DA99--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?161717037.20160110020240>