Mailinglist Archive: opensuse-bugs (13462 mails)

[bugzilla_noreply@xxxxxxxxxx]

https://bugzilla.novell.com/show_bug.cgi?id=333739#c8





--- Comment #8 from Tony Jones <tonyj@xxxxxxxxxx>  2007-10-23 17:34:43 MST ---
audit is enabled by default.

audit=0 will indeed disable audit context creation at boottime but auditd
renables it as soon as it starts up (arguably a bug, I'll fix this and
upstream). 

Anyways, you can confirm the above doing 'auditctl -s' which should show
"enabled=1".

auditctl -e 0 will disable context creation. Can you try your benchmarks again
after doing this. 

We used to load audit in a disabled state (using a SLES10 patch but I reverted
back to upstream for 10.3 (maybe before 10.2, I'd need to check).  For sure the
patch (initial state disabled) was in 10.0.  Reason for doing this was that the
performance was supposed to have been improved but I'm guessing not enough.

My recollection is that auditd isn't installed on Ubuntu and that
CONFIG_AUDITSYSCALL is disabled.  Non syscall audit messages come out via
printk.


-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.