audit messages when there's no audit daemon

David Woodhouse dwmw2 at infradead.org
Sun Jun 19 23:20:07 UTC 2005


On Sun, 2005-06-19 at 14:12 -0400, Steve Grubb wrote:
> It seems that the user space audit messages go to the 
> screen after login when they don't have an audit daemon running. This leads 
> to 4 pam state messages immediately on login, messages when you run a trusted 
> app like passwd, or whenever hwclock runs. This is not desirable.

We should probably just refrain from passing on user-generated messages
when !audit_enabled. I'll do that in the next build.

-- 
dwmw2




More information about the Linux-audit mailing list