Suppressing logs with kernel.printk

Aaron Lewis the.warl0ck.1989 at gmail.com
Tue Jan 21 08:00:21 UTC 2014


Sorry I mean, kauditd.

I already killed the auditd daemon, only kernel thread is running

On Tue, Jan 21, 2014 at 3:59 PM, Aaron Lewis <the.warl0ck.1989 at gmail.com> wrote:
> Hi,
>
> I'm trying to suppress logs from auditd with sysctl options,
>
> So I set kernel.printk to 4 4 4 4
>
> And modified KLOGD_OPTIONS to "-x -c 4"
>
> Then I restarted syslogd and klogd
>
> But I still see auditd logs piling up, anything wrong? auditd is using
> kenrel.notice for sure
>
> --
> Best Regards,
> Aaron Lewis - PGP: 0x13714D33 - http://pgp.mit.edu/
> Finger Print:   9F67 391B B770 8FF6 99DC  D92D 87F6 2602 1371 4D33



-- 
Best Regards,
Aaron Lewis - PGP: 0x13714D33 - http://pgp.mit.edu/
Finger Print:   9F67 391B B770 8FF6 99DC  D92D 87F6 2602 1371 4D33




More information about the Linux-audit mailing list