Re: audit.71 kernel
On Sunday 26 June 2005 17:33, David Woodhouse wrote:
- Reduce loglevel of audit messages to KERN_NOTICE
The SE Linux guys say this would hurt their troubleshooting ability. On
shutdown, there are some AVC denial messages that they can get only by using
a serial console. We either need a configurable setting that auditctl can
adjust, or change the priority of only the user space messages.
-Steve