On 05/30/15 10:19, jd1008 wrote: > How can we stop auditd ??? > 2 choices 1. add audit=0 to the kernel command line in grub menu or 2. systemctl mask auditd.service reboot. You can't stop it manually in a running system due to the settings in the auditd.service file. -- If you can't laugh at yourself, others will gladly oblige.