Comment 6 for bug 158040

The ring-buffer approach is not going to be accepted. First off, a list of files that have changed is useless. The full path does not accomodate symlinks or hardlinks. Secondly, we don't want users being able to see all the files that have changed. That's a data leak that exposes security concerns.

Closing kernel task, as there seems to be no real solution for the kernel. Using sysctl to increase the default (since the default is supposed to be safe) seems like the only sane idea.