Re: Logging from within kernel

On Mon, Nov 26, 2018 at 8:48 AM Paul Moore <paul(a)paul-moore.com&gt; wrote: > On Fri, Nov 23, 2018 at 6:47 PM Ranran <ranshalit(a)gmail.com&gt; wrote: > > Hello, > > > > Is it possible to log all messages from within kernel, (without any > > userspace application and daemon) ? > > If you are not running an audit daemon then the audit records will be > written to kernel's ring buffer (look for them in dmesg). This is not > really considered ideal (e.g. one drawback is that the output is rate > limited), but it can be attractive for small systems with a limited > number of audit events; last I checked this is the approach used by > Android. Not since the official merge into mainline. I wrote a libaudit port and Android's logd system uses it ...