[PATCH] Audit: make audit=0 actually turn off audit
Steve Grubb
sgrubb at redhat.com
Wed Nov 5 21:02:45 UTC 2008
On Wednesday 05 November 2008 12:47:09 Eric Paris wrote:
> Currently audit=0 on the kernel command line does absolutely nothing.
> Audit always loads and always uses its resources such as creating the
> kernel netlink socket. This patch causes audit=0 to actually disable
> audit. Audit will use no resources and starting the userspace auditd
> daemon will not cause the kernel audit system to activate.
>
> Signed-off-by: Eric Paris <eparis at redhat.com>
ACK
-Steve
More information about the Linux-audit
mailing list