excessive crond PAM messages in audit.log

Steve Grubb sgrubb at redhat.com
Mon Nov 2 19:38:57 UTC 2009


On Monday 02 November 2009 11:54:38 am Nicholas Nachefski wrote:
> I'm looking for a way to silence frequent messages attributed to crond in
>  my audit.log files.

This has come up in the past and we don't have a good solution. I've spoke 
with one of the upstream pam maintainers about this and they are thinking 
about it. We have also kicked around adding filtering based on selinux context 
info which could possibly solve your problem.

-Steve




More information about the Linux-audit mailing list