|
sgrubb |
78ce71 |
diff -ur audit.orig/init.d/audit.rules audit/init.d/audit.rules
|
|
sgrubb |
78ce71 |
--- audit.orig/init.d/audit.rules 2014-07-20 10:43:44.724841702 -0400
|
|
sgrubb |
78ce71 |
+++ audit/init.d/audit.rules 2014-07-22 14:55:50.856253189 -0400
|
|
sgrubb |
78ce71 |
@@ -6,9 +6,8 @@
|
|
sgrubb |
78ce71 |
# First rule - delete all
|
|
sgrubb |
78ce71 |
-D
|
|
sgrubb |
78ce71 |
|
|
sgrubb |
78ce71 |
-# Increase the buffers to survive stress events.
|
|
sgrubb |
78ce71 |
-# Make this bigger for busy systems
|
|
sgrubb |
78ce71 |
--b 320
|
|
sgrubb |
78ce71 |
-
|
|
sgrubb |
78ce71 |
-# Feel free to add below this line. See auditctl man page
|
|
sgrubb |
78ce71 |
+# This suppresses syscall auditing for all tasks started
|
|
sgrubb |
78ce71 |
+# with this rule in effect. Remove it if you need syscall
|
|
sgrubb |
78ce71 |
+# auditing.
|
|
sgrubb |
78ce71 |
+-a task,never
|
|
sgrubb |
78ce71 |
|