audit.71 kernel

Steve Grubb sgrubb at redhat.com
Mon Jun 27 11:15:59 UTC 2005


On Sunday 26 June 2005 17:33, David Woodhouse wrote:
> - Reduce loglevel of audit messages to KERN_NOTICE

The SE Linux guys say this would hurt their troubleshooting ability. On 
shutdown, there are some AVC denial messages that they can get only by using 
a serial console. We either need a configurable setting that auditctl can 
adjust, or change the priority of only the user space messages.

-Steve




More information about the Linux-audit mailing list