Sorry I mean, kauditd. I already killed the auditd daemon, only kernel thread is running
On Tue, Jan 21, 2014 at 3:59 PM, Aaron Lewis <[email protected]> wrote: > Hi, > > I'm trying to suppress logs from auditd with sysctl options, > > So I set kernel.printk to 4 4 4 4 > > And modified KLOGD_OPTIONS to "-x -c 4" > > Then I restarted syslogd and klogd > > But I still see auditd logs piling up, anything wrong? auditd is using > kenrel.notice for sure > > -- > Best Regards, > Aaron Lewis - PGP: 0x13714D33 - http://pgp.mit.edu/ > Finger Print: 9F67 391B B770 8FF6 99DC D92D 87F6 2602 1371 4D33 -- Best Regards, Aaron Lewis - PGP: 0x13714D33 - http://pgp.mit.edu/ Finger Print: 9F67 391B B770 8FF6 99DC D92D 87F6 2602 1371 4D33 -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
