How to disable kaudit???

[jd1008]

On 09/28/2015 07:55 PM, Ed Greshko wrote:
> On 09/29/2015 09:48 AM, jd1008 wrote:
>>
>> On 09/28/2015 07:45 PM, Ed Greshko wrote:
>>> On 09/29/2015 09:35 AM, jd1008 wrote:
>>>> On 09/28/2015 06:46 PM, Ed Greshko wrote:
>>>>> On 09/29/2015 08:37 AM, jd1008 wrote:
>>>>>> Huge amounts of audit output in /var/log/messages.
>>>>>>
>>>>>> How can we stop it? or completely disable it.
>>>>>>
>>>>> https://lists.fedoraproject.org/pipermail/users/2015-July/463123.html
>>>>>
>>>> # systemctl stop auditd
>>>> Failed to stop auditd.service: Operation refused, unit auditd.service may be requested by dependency only.
>>> It can't be stopped manually once it is started.  Look in the service file to see...
>>>
>>> RefuseManualStop=yes
>>>> So, which of these services needs to be stoped? disabled? hacked? in order to stop auditd.
>>>> Can it even be disabled without screwing up the system?
>>> If you want to completely disable auditd just do what the link provided tells you....
>>>
>>> stick audit=0 on the kernel command line options in grub.cfg, disable the auditd service (or uninstall it).
>>>
>>> Others have done it with no ill effects.
>>>
>>>
>> Too many dependencies! :(
> Really?
>
>
> [root at f22g ~]# dnf erase audit
> Dependencies resolved.
> ==================================================================================
>   Package                     Arch        Version               Repository    Size
> ==================================================================================
> Removing:
>   audit                       x86_64      2.4.4-1.fc22          @System      625 k
>   setroubleshoot              x86_64      3.2.24-2.fc22         @System      235 k
>   setroubleshoot-plugins      noarch      3.0.61-1.fc22         @System      5.1 M
>   setroubleshoot-server       x86_64      3.2.24-2.fc22         @System      1.2 M
>
> Transaction Summary
> ==================================================================================
> Remove  4 Packages
>
>
Because of habit, I used yum instead of dnf. But I thought I should erase
4 or 5 packages whose names included the word audit, such as

yum erase audit-libs-python  audit-libs  audit-libs-devel  audit

and that belched out tons of dependencies.

The link you mentioned did not tell me how to erase.

Thanks for the heads up.