[PATCH] Audit: make audit=0 actually turn off audit

Steve Grubb sgrubb at redhat.com
Wed Nov 5 21:02:45 UTC 2008


On Wednesday 05 November 2008 12:47:09 Eric Paris wrote:
> Currently audit=0 on the kernel command line does absolutely nothing.
> Audit always loads and always uses its resources such as creating the
> kernel netlink socket.  This patch causes audit=0 to actually disable
> audit.  Audit will use no resources and starting the userspace auditd
> daemon will not cause the kernel audit system to activate.
>
> Signed-off-by: Eric Paris <eparis at redhat.com>

ACK

-Steve




More information about the Linux-audit mailing list