Messages in this thread | | | From | Andi Kleen <> | Subject | Re: Why is syscall auditing on with no rules? | Date | Sun, 02 Feb 2014 07:05:48 -0800 |
| |
Andy Lutomirski <luto@amacapital.net> writes:
> On a stock Fedora installation: > > $ sudo auditctl -l > No rules
I noticed the same recently on a recent opensuse. kauditd is running, even though I uninstalled all audit related userland long before. I'm sure the evil "make syscalls slow" flag is set too.
-Andi
-- ak@linux.intel.com -- Speaking for myself only
| |