Audit messages on console
Stephen John Smoogen
smooge at gmail.com
Fri Aug 3 19:10:55 UTC 2007
On 8/3/07, Ameel Kamboh <akamboh at nortel.com> wrote:
>
>
>
> I notice that if the auditd service is not running,
> I see all my audit logs go out on the console,
> When I start auditd service they go to the appropriate log file.
> Is there a way to turn this off in the kernel?
>
Simplest fix:
sed -ibackup -e 's/KLOGD_OPTIONS=\"-x\"/KLOGD_OPTIONS="-x -c 2"/'
/etc/sysconfig/syslog
--
Stephen J Smoogen. -- CSIRT/Linux System Administrator
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. "The Merchant of Venice"
More information about the Linux-audit
mailing list