On Wednesday 05 November 2008 12:47:09 Eric Paris wrote: > Currently audit=0 on the kernel command line does absolutely nothing. > Audit always loads and always uses its resources such as creating the > kernel netlink socket. This patch causes audit=0 to actually disable > audit. Audit will use no resources and starting the userspace auditd > daemon will not cause the kernel audit system to activate. > > Signed-off-by: Eric Paris <[EMAIL PROTECTED]>
ACK -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
