Hi, I'm trying to suppress logs from auditd with sysctl options,
So I set kernel.printk to 4 4 4 4 And modified KLOGD_OPTIONS to "-x -c 4" Then I restarted syslogd and klogd But I still see auditd logs piling up, anything wrong? auditd is using kenrel.notice for sure -- Best Regards, Aaron Lewis - PGP: 0x13714D33 - http://pgp.mit.edu/ Finger Print: 9F67 391B B770 8FF6 99DC D92D 87F6 2602 1371 4D33 -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
