[ale] VM guest partitioning practices

[Ted W.]

On 12/09/2014 03:31 PM, James Sumners wrote:
> On Tue, Dec 9, 2014 at 3:26 PM, Ted W. <ted-lists at xy0.org> wrote:
>
>> There are built in mechanisms, at least in RHEL, which can cleanly drop
>> the system to single user mode should /var/log fill up.
>
>
> Would you please provide me with a link to some documentation on this? It's
> not something I am familiar with.
>

It's a function of auditd. I suppose it's technically cross platform, 
assuming you were running auditd...

 > disk_full_action
 >     This parameter tells the system what action to take when the
 >     system has detected that the partition to which log files are
 >     written has become full. Valid values are ignore, syslog,
 >     exec, suspend, single, and halt.

http://man7.org/linux/man-pages/man5/auditd.conf.5.html

-- 
Ted W. <ted at xy0.org>