[CentOS] Kernel Audit Messages

Kirk Bocek

t004 at kbocek.com
Mon Oct 17 16:19:15 UTC 2005


Since updating to 4.2 my Opteron server has been flooded by messages like:

audit(1129565701.837:155): user pid=4700 uid=0 auid=4294967295 msg='PAM session open: 
user=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron result=Success)'

to both /var/log/messages and the kernel ring buffer. Looks like they are being 
generated by cron jobs being run on the server.

Does anyone know how to turn these messages off or to redirect them?

Kirk




More information about the CentOS mailing list