Audit messages on console

Stephen John Smoogen smooge at gmail.com
Fri Aug 3 19:10:55 UTC 2007


On 8/3/07, Ameel Kamboh <akamboh at nortel.com> wrote:
>
>
>
> I notice that if the auditd service is not running,
> I see all my audit logs go out on the console,
> When I start auditd service they go to the appropriate log file.
> Is there a way to turn this off in the kernel?
>


Simplest fix:

sed -ibackup -e 's/KLOGD_OPTIONS=\"-x\"/KLOGD_OPTIONS="-x -c 2"/'
/etc/sysconfig/syslog



-- 
Stephen J Smoogen. -- CSIRT/Linux System Administrator
How far that little candle throws his beams! So shines a good deed
in a naughty world. = Shakespeare. "The Merchant of Venice"




More information about the Linux-audit mailing list