Description of problem: The dispatcher process is spawned with a stdin file descriptor that is non-blocking. It would probably be better if it were blocking. Version-Release number of selected component (if applicable): audit-1.1.2-1 How reproducible: 100% Steps to Reproduce: 1. See bug #173283. Actual results: Shell script will busy-loop. Expected results: No busy-looping, read() call waits until data is available.
This is by design since dispatching events is secondary to logging to disk. The audit daemon is in a race with the OS to dequeue events before the backlog overflows. Because of this, the dispatcher comm is done with non-blocking techniques.