On 7/29/19 4:32 PM, Richard Guy Briggs wrote:
It is being ignored because that kernel command line extension to
the
original feature was never backported to RHEL7.
That would definitely do it.
In hindsight, that would have been pretty useful without causing much
risk. Normally feature backport is driven by customer demand. There
was a bit of pushback when it was first introduced upstream, but this is
exactly the scenario I envisioned where it would be most useful. It is
possible to compile your own kernel and change the default value, but
that's obviously a hurdle for most.
It would definitely have been useful, some might say even necessary,
given the audit event startup noise occurring with systemd.
Wow. Thanks Richard, I appreciate the answer on this.
LCB
--
Lenny Bruzenak
MagitekLTD