Re: [PATCH] Audit: make audit=0 actually turn off audit
On Wednesday 05 November 2008 12:47:09 Eric Paris wrote:
Currently audit=0 on the kernel command line does absolutely
nothing.
Audit always loads and always uses its resources such as creating the
kernel netlink socket. This patch causes audit=0 to actually disable
audit. Audit will use no resources and starting the userspace auditd
daemon will not cause the kernel audit system to activate.
Signed-off-by: Eric Paris <eparis(a)redhat.com>
ACK
-Steve