Re: audit messages when there's no audit daemon
On Wednesday 22 June 2005 02:50, David Woodhouse wrote:
> We still have a minor problem. The new patch for hwclock in
util-linux
> causes it to put a big nasty audit message on the screen during
> shutdown.
Why isn't audit disabled at this point?
Which program would be responsible for disabling the audit system? init?
Also, there are actions that occur on shutdown that SE Linux people need to
see in order to correct policy. So, we can't affect AVC messages including
USER_AVC.
-Steve