[SOLVED] Re: Completely disable audit.log, only pass logs through dispatcher

Aaron Lewis the.warl0ck.1989 at gmail.com
Thu Dec 26 00:51:52 UTC 2013


Hi Peter,

Thanks!

On Thu, Dec 26, 2013 at 3:53 AM, Peter Moody <pmoody at google.com> wrote:
>
> I asked this same question a couple of months ago.
>
> https://www.redhat.com/archives/linux-audit/2013-October/msg00083.html
>
> On Wed, Dec 25 2013 at 03:21, Aaron Lewis wrote:
>> Hi,
>>
>> is it possible to completely disable audit log?
>>
>> I use a dispatcher to handle everything and doens't want anything on disk.
>> (And I don't care for a trivial data loss)
>>
>> I tried to set the log to /dev/null, but auditd doesn't accept that



-- 
Best Regards,
Aaron Lewis - PGP: 0xDFE6C29E ( http://keyserver.veridis.com )
Finger Print: 9482 448F C7C3 896C 1DFE 7DD3 2492 A7D0 DFE6 C29E




More information about the Linux-audit mailing list