Disabling auditd on Fedora 22

Tom Horsley horsley1953 at gmail.com
Fri Jun 19 23:19:15 UTC 2015


On Fri, 19 Jun 2015 19:14:56 -0400
Sam Varshavchik wrote:

> My totally unscientific assessment of auditd is that it's a massive syslog  
> spammer, and won't be missed.

There are a few obscure questions you can answer about your
system using auditd, but it is almost impossible to discover
how to use it to find out the info even if you suspect it might
be useful :-).

Personally, I also set audit=0 on the kernel command line
to prevent anyone from even trying to talk to auditd.


More information about the users mailing list