Jaejyn Shin wrote:
I apply auditd to my android, and the violation logs are written in the
/data/misc/audit directory successfully.
But the logs are not written in the kernel log if I use the auditd .
I want to write logs in the both of paths, kernel log and /data/misc/audit
Is it possible?
If you patch your kernel, perhaps.
On Linux, in general, once something connects to the audit netlink
socket certain logs stop going to the kernel ring buffer and only go to
auditd.
--
This message was distributed to subscribers of the seandroid-list mailing list.
If you no longer wish to subscribe, send mail to [email protected] with
the words "unsubscribe seandroid-list" without quotes as the message.
