Linux-audit Archive on lore.kernel.org
 help / color / mirror / Atom feed
* Re: Removing Audit-libs, Python3-audit
@ 2022-02-23 18:32 Roger Moore
  2022-02-23 19:35 ` Steve Grubb
  2022-02-23 20:19 ` Enzo Matsumiya
  0 siblings, 2 replies; 3+ messages in thread
From: Roger Moore @ 2022-02-23 18:32 UTC (permalink / raw)
  To: linux-audit@redhat.com

Hi,
     Can you let me know how to remove all audit code, including audit-libs and python3-audit, and stop them from being updated by DNF update.

DNF keeps reinstalling the python3 code (audit-libs python3-audit).

I have  exclude=audit-libs,python3-audit in /etc/yum.conf

But, it keeps on reinstalling.

Best Regards,

Roger Moore.



--
Linux-audit mailing list
Linux-audit@redhat.com
https://listman.redhat.com/mailman/listinfo/linux-audit


^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Removing Audit-libs, Python3-audit
  2022-02-23 18:32 Removing Audit-libs, Python3-audit Roger Moore
@ 2022-02-23 19:35 ` Steve Grubb
  2022-02-23 20:19 ` Enzo Matsumiya
  1 sibling, 0 replies; 3+ messages in thread
From: Steve Grubb @ 2022-02-23 19:35 UTC (permalink / raw)
  To: linux-audit@redhat.com; +Cc: Roger Moore

Hello,

On Wednesday, February 23, 2022 1:32:31 PM EST Roger Moore wrote:
>      Can you let me know how to remove all audit code, including audit-libs
> and python3-audit, and stop them from being updated by DNF update.
> 
> DNF keeps reinstalling the python3 code (audit-libs python3-audit).
> 
> I have  exclude=audit-libs,python3-audit in /etc/yum.conf
> 
> But, it keeps on reinstalling.

rpmreaper is a good tool to check dependencies. On my system is shows these 
packages pull it in:

        5.4M ┌─< python3-policycoreutils   3.3-1.fc35.noarch
  o     1.3M ├─< setroubleshoot-server     3.3.28-3.fc35.x86_64
        336K python3-audit             3.0.8-1.fc35.x86_64                      

audit-libs is likely impossible to remove. Pam and shadow-utils link against 
it. Unfortunately, systemd turns auditing on. But if you boot with the kernel 
audit=0 option and disable the systemd-journald-audit.socket, you should not 
get any audit events.

Hope this helps...

-Steve



--
Linux-audit mailing list
Linux-audit@redhat.com
https://listman.redhat.com/mailman/listinfo/linux-audit

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: Removing Audit-libs, Python3-audit
  2022-02-23 18:32 Removing Audit-libs, Python3-audit Roger Moore
  2022-02-23 19:35 ` Steve Grubb
@ 2022-02-23 20:19 ` Enzo Matsumiya
  1 sibling, 0 replies; 3+ messages in thread
From: Enzo Matsumiya @ 2022-02-23 20:19 UTC (permalink / raw)
  To: Roger Moore; +Cc: linux-audit@redhat.com

On 02/23, Roger Moore wrote:
>I have  exclude=audit-libs,python3-audit in /etc/yum.conf

IIRC yum.conf expects a space-separated list for exclude=, whereas
dnf.conf expects a commad-separated list.

Not sure if that's your issue though...


HTH

Enzo

--
Linux-audit mailing list
Linux-audit@redhat.com
https://listman.redhat.com/mailman/listinfo/linux-audit


^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2022-02-23 20:29 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2022-02-23 18:32 Removing Audit-libs, Python3-audit Roger Moore
2022-02-23 19:35 ` Steve Grubb
2022-02-23 20:19 ` Enzo Matsumiya

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox