On 09/28/2015 07:55 PM, Ed Greshko wrote:
On 09/29/2015 09:48 AM, jd1008 wrote:
>
> On 09/28/2015 07:45 PM, Ed Greshko wrote:
>> On 09/29/2015 09:35 AM, jd1008 wrote:
>>> On 09/28/2015 06:46 PM, Ed Greshko wrote:
>>>> On 09/29/2015 08:37 AM, jd1008 wrote:
>>>>> Huge amounts of audit output in /var/log/messages.
>>>>>
>>>>> How can we stop it? or completely disable it.
>>>>>
>>>>
https://lists.fedoraproject.org/pipermail/users/2015-July/463123.html
>>>>
>>> # systemctl stop auditd
>>> Failed to stop auditd.service: Operation refused, unit auditd.service may be
requested by dependency only.
>> It can't be stopped manually once it is started. Look in the service file to
see...
>>
>> RefuseManualStop=yes
>>> So, which of these services needs to be stoped? disabled? hacked? in order to
stop auditd.
>>> Can it even be disabled without screwing up the system?
>> If you want to completely disable auditd just do what the link provided tells
you....
>>
>> stick audit=0 on the kernel command line options in grub.cfg, disable the auditd
service (or uninstall it).
>>
>> Others have done it with no ill effects.
>>
>>
> Too many dependencies! :(
Really?
[root@f22g ~]# dnf erase audit
Dependencies resolved.
==================================================================================
Package Arch Version Repository Size
==================================================================================
Removing:
audit x86_64 2.4.4-1.fc22 @System 625 k
setroubleshoot x86_64 3.2.24-2.fc22 @System 235 k
setroubleshoot-plugins noarch 3.0.61-1.fc22 @System 5.1 M
setroubleshoot-server x86_64 3.2.24-2.fc22 @System 1.2 M
Transaction Summary
==================================================================================
Remove 4 Packages
Because of habit, I used yum instead of dnf. But I thought I should erase
4 or 5 packages whose names included the word audit, such as
yum erase audit-libs-python audit-libs audit-libs-devel audit
and that belched out tons of dependencies.
The link you mentioned did not tell me how to erase.
Thanks for the heads up.