"write_logs = no" not working

Ian Pilcher arequipeno at gmail.com
Mon Mar 6 02:38:51 UTC 2017


I have a Banana Pi-based firewall system, which runs off a micro-SD
card and sends all of its logs (including audit events) to a syslog
server.

I have set "write_logs = no" in /etc/audit/auditd.conf, but the local
log file is still being written.  (Commenting out the log_file line
causes auditd to abort.)

What do I need to do to disable writing the local file?

(This is audit 2.6.5 on CentOS 7.)

-- 
========================================================================
Ian Pilcher                                         arequipeno at gmail.com
-------- "I grew up before Mark Zuckerberg invented friendship" --------
========================================================================




More information about the Linux-audit mailing list