From: Martin Pitt Date: Sun, 28 Dec 2014 12:49:35 +0100 Subject: Don't enable audit by default It causes flooding of dmesg and syslog, suppressing actually important messages. Don't enable it for now, until a better solution is found: http://lists.freedesktop.org/archives/systemd-devel/2014-December/026591.html Bug-Debian: https://bugs.debian.org/773528 --- man/journald.conf.xml | 2 +- src/journal/journald-server.c | 2 +- src/journal/journald.conf | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/man/journald.conf.xml b/man/journald.conf.xml index 160544a..7e6f175 100644 --- a/man/journald.conf.xml +++ b/man/journald.conf.xml @@ -438,7 +438,7 @@ systemd-journald collects generated audit records, it just controls whether it tells the kernel to generate them. This means if another tool turns on auditing even if systemd-journald left it off, it will still collect the generated - messages. Defaults to on. + messages. Defaults to off. diff --git a/src/journal/journald-server.c b/src/journal/journald-server.c index a78e2c0..efeb50c 100644 --- a/src/journal/journald-server.c +++ b/src/journal/journald-server.c @@ -2279,7 +2279,7 @@ int server_init(Server *s, const char *namespace) { .compress.threshold_bytes = UINT64_MAX, .seal = true, - .set_audit = true, + .set_audit = false, .watchdog_usec = USEC_INFINITY, diff --git a/src/journal/journald.conf b/src/journal/journald.conf index 64f4d4b..a690681 100644 --- a/src/journal/journald.conf +++ b/src/journal/journald.conf @@ -44,4 +44,4 @@ #MaxLevelWall=emerg #LineMax=48K #ReadKMsg=yes -#Audit=yes +#Audit=no