From 5dbe0067119090ef91b1cbabc2b983a9e9db9311 Mon Sep 17 00:00:00 2001 From: Martin Pitt Date: Sun, 28 Dec 2014 12:49:35 +0100 Subject: [PATCH] Don't enable audit by default It causes flooding of dmesg and syslog, suppressing actually important messages. Don't enable it for now, until a better solution is found: http://lists.freedesktop.org/archives/systemd-devel/2014-December/026591.html Bug-Debian: https://bugs.debian.org/773528 Gbp-Pq: Topic debian Gbp-Pq: Name Don-t-enable-audit-by-default.patch --- man/journald.conf.xml | 2 +- src/journal/journald-server.c | 2 +- src/journal/journald.conf | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/man/journald.conf.xml b/man/journald.conf.xml index ff5050a4..347de860 100644 --- a/man/journald.conf.xml +++ b/man/journald.conf.xml @@ -417,7 +417,7 @@ systemd-journald collects generated audit records, it just controls whether it tells the kernel to generate them. This means if another tool turns on auditing even if systemd-journald left it off, it will still collect the generated - messages. Defaults to on. + messages. Defaults to off. diff --git a/src/journal/journald-server.c b/src/journal/journald-server.c index c89baec3..b54b4c0e 100644 --- a/src/journal/journald-server.c +++ b/src/journal/journald-server.c @@ -2208,7 +2208,7 @@ int server_init(Server *s, const char *namespace) { .compress.threshold_bytes = (uint64_t) -1, .seal = true, - .set_audit = true, + .set_audit = false, .watchdog_usec = USEC_INFINITY, diff --git a/src/journal/journald.conf b/src/journal/journald.conf index d6cd5b15..5e4b0e2a 100644 --- a/src/journal/journald.conf +++ b/src/journal/journald.conf @@ -41,4 +41,4 @@ #MaxLevelWall=emerg #LineMax=48K #ReadKMsg=yes -#Audit=yes +#Audit=no -- 2.30.2