[CentOS] how to disable lots of auditd messages?
Nicolas Thierry-Mieg
Nicolas.Thierry-Mieg at imag.fr
Tue Jun 2 12:41:12 UTC 2009
MontyRee wrote:
> hello all.
>
> My system is centos 5.x and there is no module related auditd
> there is no process(daemon) related auditd and selinux definately disabled.
>
> But I can see lots of auditd messages like below.
>
> Oct 20 02:01:01 linux kernel: type=1106 audit(1224435661.064:65210): user pid=25860 uid=0 auid=0 msg='PAM: session close acct="root" : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
>
>
> Is there any way to disable this messages?
not sure if this is a good thing to do, but you can remove the audit
package, and/or add audit=0 as a kernel option in grub.conf.
More information about the CentOS
mailing list