Hi,
> I'm not entirely sure which kernel config option this refers to, could
> you dig that up? That not withstanding, your suggestion seems fine to
> me, though I would appreciate some feedback from others. I've CCed
> Manoj in case he has some oppinions.
CONFIG_AUDIT and CONFIG_AUDIT_SYSCALL.
IIRC the latter allows you to disable audit logging from userspace as
well as configure where the logs go to (e.g. via netlink to a userspace
audit daemon)
best regards,
Erich Schubert
--
erich@(vitavonni.de|debian.org) -- GPG Key ID: 4B3A135C (o_
Friends are those who reach out for //\
your hand but touch your heart. V_/_
Computer rechnen vor allem damit, daß der Mensch denkt.
