[CentOS] Kernel Audit Messages
t004 at kbocek.com
Mon Oct 17 16:19:15 UTC 2005
Since updating to 4.2 my Opteron server has been flooded by messages like:
audit(1129565701.837:155): user pid=4700 uid=0 auid=4294967295 msg='PAM session open:
user=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron result=Success)'
to both /var/log/messages and the kernel ring buffer. Looks like they are being
generated by cron jobs being run on the server.
Does anyone know how to turn these messages off or to redirect them?
More information about the CentOS