From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: [PATCH] Audit: make audit=0 actually turn off audit Date: Wed, 5 Nov 2008 16:02:45 -0500 Message-ID: <200811051602.46055.sgrubb@redhat.com> References: <1225907229.3300.142.camel@localhost.localdomain> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <1225907229.3300.142.camel@localhost.localdomain> Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Eric Paris Cc: linux-audit@redhat.com, viro@zeniv.linux.org.uk List-Id: linux-audit@redhat.com On Wednesday 05 November 2008 12:47:09 Eric Paris wrote: > Currently audit=3D0 on the kernel command line does absolutely nothing. > Audit always loads and always uses its resources such as creating the > kernel netlink socket. =C2=A0This patch causes audit=3D0 to actually di= sable > audit. =C2=A0Audit will use no resources and starting the userspace aud= itd > daemon will not cause the kernel audit system to activate. > > Signed-off-by: Eric Paris ACK -Steve