Suppressing logs with kernel.printk

Aaron Lewis the.warl0ck.1989 at gmail.com
Tue Jan 21 07:59:19 UTC 2014


Hi,

I'm trying to suppress logs from auditd with sysctl options,

So I set kernel.printk to 4 4 4 4

And modified KLOGD_OPTIONS to "-x -c 4"

Then I restarted syslogd and klogd

But I still see auditd logs piling up, anything wrong? auditd is using
kenrel.notice for sure

-- 
Best Regards,
Aaron Lewis - PGP: 0x13714D33 - http://pgp.mit.edu/
Finger Print:   9F67 391B B770 8FF6 99DC  D92D 87F6 2602 1371 4D33




More information about the Linux-audit mailing list