audit message output to console

Steve Grubb sgrubb at redhat.com
Sun Jul 24 15:34:47 UTC 2005


On Wednesday 20 July 2005 12:30, Denise Garrett wrote:
> When auditd is not running, anything it should have captured will be
> printed to the console instead of to the log. So the fact that you are
> seeing this on the console is expected.

Sort of...what really happens is that anything that would have been captured 
goes to syslog. Syslog.conf has some rules that any kernel message should be 
printed to the screen. You can quieten this by adjusting the syslog rules or 
using dmesg -n x  where is is the level that you want to allow to the screen.

-Steve




More information about the Linux-audit mailing list