Re: Removing Audit-libs, Python3-audit

Re: Removing Audit-libs, Python3-audit

[Roger Moore]

Hi,
     Can you let me know how to remove all audit code, including audit-libs and python3-audit, and stop them from being updated by DNF update.

DNF keeps reinstalling the python3 code (audit-libs python3-audit).

I have  exclude=audit-libs,python3-audit in /etc/yum.conf

But, it keeps on reinstalling.

Best Regards,

Roger Moore.



--
Linux-audit mailing list
Linux-audit@redhat.com
https://listman.redhat.com/mailman/listinfo/linux-audit

Re: Removing Audit-libs, Python3-audit

[Steve Grubb]

Hello,

On Wednesday, February 23, 2022 1:32:31 PM EST Roger Moore wrote:
>      Can you let me know how to remove all audit code, including audit-libs
> and python3-audit, and stop them from being updated by DNF update.
> 
> DNF keeps reinstalling the python3 code (audit-libs python3-audit).
> 
> I have  exclude=audit-libs,python3-audit in /etc/yum.conf
> 
> But, it keeps on reinstalling.

rpmreaper is a good tool to check dependencies. On my system is shows these 
packages pull it in:

        5.4M ┌─< python3-policycoreutils   3.3-1.fc35.noarch
  o     1.3M ├─< setroubleshoot-server     3.3.28-3.fc35.x86_64
        336K python3-audit             3.0.8-1.fc35.x86_64                      

audit-libs is likely impossible to remove. Pam and shadow-utils link against 
it. Unfortunately, systemd turns auditing on. But if you boot with the kernel 
audit=0 option and disable the systemd-journald-audit.socket, you should not 
get any audit events.

Hope this helps...

-Steve



--
Linux-audit mailing list
Linux-audit@redhat.com
https://listman.redhat.com/mailman/listinfo/linux-audit

Re: Removing Audit-libs, Python3-audit

[Enzo Matsumiya]

On 02/23, Roger Moore wrote:
>I have  exclude=audit-libs,python3-audit in /etc/yum.conf

IIRC yum.conf expects a space-separated list for exclude=, whereas
dnf.conf expects a commad-separated list.

Not sure if that's your issue though...


HTH

Enzo

--
Linux-audit mailing list
Linux-audit@redhat.com
https://listman.redhat.com/mailman/listinfo/linux-audit