audit.71 kernel
Steve Grubb
sgrubb at redhat.com
Mon Jun 27 11:15:59 UTC 2005
On Sunday 26 June 2005 17:33, David Woodhouse wrote:
> - Reduce loglevel of audit messages to KERN_NOTICE
The SE Linux guys say this would hurt their troubleshooting ability. On
shutdown, there are some AVC denial messages that they can get only by using
a serial console. We either need a configurable setting that auditctl can
adjust, or change the priority of only the user space messages.
-Steve
More information about the Linux-audit
mailing list