Re: auditd spamming of dmesg

2020-12-21 Thread Sérgio Basto
On Mon, 2020-12-21 at 12:14 -0600, Richard Shaw wrote: > It looks like this has been a problem for a while but I only just now > noticed. > Is it really necessary to have all the audit: messages in dmesg? It > makes it nearly unreadable. I revisited

Re: auditd spamming of dmesg

2020-12-21 Thread Richard Shaw
On Mon, Dec 21, 2020 at 1:43 PM Gary Buhrmaster wrote: > On Mon, Dec 21, 2020 at 7:25 PM Richard Shaw wrote: > > > I would say so... > > > > $ dmesg | grep -c audit > > 767 > > > > $ dmesg | grep -cv audit > > 30 > > > > You will likely have to share some of the audit > entries. > I don't want

Re: auditd spamming of dmesg

2020-12-21 Thread Gary Buhrmaster
On Mon, Dec 21, 2020 at 7:25 PM Richard Shaw wrote: > I would say so... > > $ dmesg | grep -c audit > 767 > > $ dmesg | grep -cv audit > 30 > You will likely have to share some of the audit entries. That last time I recall seeing so many audit entries in dmesg I had set selinux to be

Re: auditd spamming of dmesg

2020-12-21 Thread Richard Shaw
On Mon, Dec 21, 2020 at 12:54 PM Alexander Ploumistos < alex.ploumis...@gmail.com> wrote: > Hello Richard, > > Right after logging in (and starting Firefox), dmesg returns 1176 > lines, of which 25 are audit messages. It's pretty much the same ratio > on a second desktop and slightly higher

Re: auditd spamming of dmesg

2020-12-21 Thread Alexander Ploumistos
Hello Richard, Right after logging in (and starting Firefox), dmesg returns 1176 lines, of which 25 are audit messages. It's pretty much the same ratio on a second desktop and slightly higher (46/724) on a server running multiple services, but I would call neither nearly unreadable. Are you