rhel8: options disp_qos and dispatcher for auditd were deprecated
Issue
- Parameters for auditd (disp*) which were used in RHEL7 do not exist in RHEL8 onwards.
- We added the following 2 lines to
/etc/audit/auditd.conf:
disp_qos = lossless
dispatcher = /sbin/audispd
..and then restarted auditd.service. Later, the following messages were observed in /var/log/messages:
auditd[PID]: The disp_qos option is deprecated - line 41
auditd[PID]: The dispatcher option is deprecated - line 42
Environment
- Red Hat Enterprise Linux 9
- Red Hat Enterprise Linux 8
- auditd
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.