Package: auditd
Version: 1:2.4-1+b1
Severity: normal
Dear Maintainer,
auditd default rules causes logs to be written so often that
an old system with slow disks becomes very slow. My system (10 years old
pentium 4) had app. 70% iowait after upgrade to Debian 8.
Removing the line
exit,always -S open -F auid=1000
from the /etc/audit/audit.rules solves the problem. But this should not be the
default (IMHO).
Regargs
Timo
-- System Information:
Debian Release: 8.0
APT prefers oldoldstable-updates
APT policy: (500, 'oldoldstable-updates'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 3.16.0-4-686-pae (SMP w/2 CPU cores)
Locale: LANG=fi_FI.UTF-8, LC_CTYPE=fi_FI.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to fi_FI.utf8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages auditd depends on:
ii gawk 1:4.1.1+dfsg-1
ii init-system-helpers 1.22
ii libaudit11:2.4-1+b1
ii libauparse0 1:2.4-1+b1
ii libc62.19-18
ii libgssapi-krb5-2 1.12.1+dfsg-19
ii libkrb5-31.12.1+dfsg-19
ii libwrap0 7.6.q-25
ii lsb-base 4.1+Debian13+nmu1
ii mawk 1.3.3-17
auditd recommends no packages.
Versions of packages auditd suggests:
pn audispd-plugins none
-- Configuration Files:
/etc/audit/audit.rules f9869e1191838c461f5b9051c78a638d [Errno 2] Tiedostoa tai
hakemistoa ei ole: u'/etc/audit/audit.rules f9869e1191838c461f5b9051c78a638d'
/etc/audit/rules.d/audit.rules [Errno 13] Lupa evätty:
u'/etc/audit/rules.d/audit.rules'
-- no debconf information
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
