grsecurity forums

Brad,

I like the idea behing the new CONFIG_GRKERNSEC_SYSCTL_ON , however it causes a lot of messagebwhen auditing is enabled.
Those message are showing up first on the console, until klogd is started and then it fills up the logs.
The ability to turn the audit messages off is far later in the boot process.

I would suggest to add another option, to disable all the audit ones, i.e. CONFIG_GRKERNSEC_SYSCTL_AUDIT_OFF.

Heiko

Use the group for audit feature if you don't want to see a bunch of logs from root.

-Brad

I actually want the auditing enabled for all users, so that's not really an option.

I can rewrite the initrd script to disable all logging, but I won't be able to get around the first message (either starting klogd or mounting proc).

Heiko