Stop/Disable AUDITD on RHEL7

[warron.french]

I am running RHEL 7 Server so that I can also run Red Hat Satellite.

I seem to be having resource contention problems and auditd is a part of
the problem consuming up to 22.0% according to results of the *top* command.

I have:

   1. executed a *systemctl disable auditd; systemctl stop auditd*  (with
   an error about dependencies)
   2. executed a *service auditd stop (*and the service stops but doesn't
   not remain stopped).
   3. Rebooting the machine after the *systemctl disable auditd *also
   didn't have any effect.


I did set -e 1 in the audit.rules file so that I could stop the auditd on
my demand, but the service restarts anyway.


Thanks for your help in advance.
--------------------------
Warron French
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20170803/241bdb58/attachment.htm>