From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ian Pilcher Subject: "write_logs = no" not working Date: Sun, 5 Mar 2017 21:22:21 -0600 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; Format="flowed" Content-Transfer-Encoding: 7bit Return-path: Received: from mx1.redhat.com (ext-mx03.extmail.prod.ext.phx2.redhat.com [10.5.110.27]) by int-mx11.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id v263MOqe017255 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Sun, 5 Mar 2017 22:22:24 -0500 Received: from mail-oi0-f47.google.com (mail-oi0-f47.google.com [209.85.218.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 2784783F47 for ; Mon, 6 Mar 2017 03:22:24 +0000 (UTC) Received: by mail-oi0-f47.google.com with SMTP id 126so27304863oig.3 for ; Sun, 05 Mar 2017 19:22:23 -0800 (PST) Received: from ian.penurio.us (cpe-70-119-136-2.tx.res.rr.com. [70.119.136.2]) by smtp.gmail.com with ESMTPSA id c126sm220382oia.5.2017.03.05.19.22.21 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 05 Mar 2017 19:22:21 -0800 (PST) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com (Apologies if this is a duplicate. gmane doesn't seem to be working.) I have a Banana Pi-based firewall system, which runs off a micro-SD card and sends all of its logs (including audit events) to a syslog server. I have set "write_logs = no" in /etc/audit/auditd.conf, but the local log file is still being written. (Commenting out the log_file line causes auditd to abort.) What do I need to do to disable writing the local file? (This is audit 2.6.5 on CentOS 7.) -- ======================================================================== Ian Pilcher arequipeno@gmail.com -------- "I grew up before Mark Zuckerberg invented friendship" -------- ========================================================================