Re: [systemd-devel] journald vs auditd

2018-11-26 Thread Lennart Poettering
On So, 25.11.18 15:07, Michał Zegan (webczat_...@poczta.onet.pl) wrote: > Well, actually I would like a feature to filter out audit data when > looking at logs. I often do things like journalctl -o cat -f or > journalctl -o cat -b | less or something without targetting a single > unit or whatever,

Re: [systemd-devel] journald vs auditd

2018-11-25 Thread Lennart Poettering
On Sa, 24.11.18 14:38, Michał Zegan (webczat_...@poczta.onet.pl) wrote: > Hello, > Does journald intent to replace auditd? Well, no. I mean, there's some useful log data generated through the audit framework that is not available elsewhere, and I think it's useful do have this among the rest of

Re: [systemd-devel] journald vs auditd

2018-11-25 Thread Michał Zegan
Well, actually I would like a feature to filter out audit data when looking at logs. I often do things like journalctl -o cat -f or journalctl -o cat -b | less or something without targetting a single unit or whatever, and in some cases I see a ton of those. I believe there is no way to filter only

[systemd-devel] journald vs auditd

2018-11-24 Thread Michał Zegan
Hello, Does journald intent to replace auditd? Because it has ability to get audit messages and uses it by default, also turning on audit. On the other hand, it does not silence dmesg audit messages like auditd seems to do, why? signature.asc Description: OpenPGP digital signature __