Re: audit console traffic
On Thursday 10 May 2007 18:47:59 paul moore wrote:
I know I should catch the death signal and disable auditing but is
there a
way to stop the audit subsytem doing this anyway. I.e if nobody is
listening then just dump the traffic
Not without patching the kernel.
I assumed it was syslog doing this but I have nothing in syslog.conf
that
points at /dev/console. Maybe its printk doing it
You can make it go away with "dmesg -n". I forget what level you have to set
it to to make it stop. But you also lose some kernel events that you might
not want to lose, too.
-Steve