Why audit messages are still sent to syslog after stopping auditd service?
Issue
-
With auditd service stopped, audit messages are still sent to syslog.
-
How to prevent kernel from sending audit messages ?
Environment
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 4
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.