On 2018-11-24 01:47, Ranran wrote: > Hello, > > Is it possible to log all messages from within kernel, (without any > userspace application and daemon) ?
No. The log messages leave the kernel via the audit netlink socket and get consumed by a userspace process. There is no facility to write it directly to disk in the kernel if that is what you are asking. > Ran - RGB -- Richard Guy Briggs <[email protected]> Sr. S/W Engineer, Kernel Security, Base Operating Systems Remote, Ottawa, Red Hat Canada IRC: rgb, SunRaycer Voice: +1.647.777.2635, Internal: (81) 32635 -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
