Improve auditd rate limit to 100/second (#22771)

liuh-80 · web-flow · commit 75e93830eca4 · 2025-05-29T18:41:53.000Z
Improve auditd rate limit to 100/second

Why I did it
Improve auditd event rate limit.

Work item tracking
Microsoft ADO (number only): 33069921
How I did it
Improve rate limit to 100

How to verify it
Manually verify
Pass all unit test cases.
diff --git a/dockers/docker-auditd/auditd_config_files/audit.rules b/dockers/docker-auditd/auditd_config_files/audit.rules
@@ -12,4 +12,4 @@
 -f 1
 
 ## Set auditd rate limit
--r 1000
+-r 100

-Original file line number
+Diff line change
 -f 1
 ## Set auditd rate limit
 --r 1000
 +-r 100