On Fri, 29 May 2015 20:19:47 -0600 jd1008 wrote: > How can we stop auditd ??? Put audit=0 on the kernel options in grub.cfg (and /etc/default/grub) and also systemctl disable auditd.service and for good measure to be absolutely sure systemctl mask auditd.service I think that is two belts and suspenders to utterly eradicate it :-).