como desligar mensagens do audit no console e no syslog
Alguem ai sabe como desligar isso ?
Código :
Jun 4 05:31:01 california kernel: [5378901.231039] audit(1212568261.812:1107874): login pid=8403 uid=0 old auid=4294967295 new auid=0
Jun 4 05:31:01 california kernel: [5378901.236633] audit(1212568261.818:1107875): user pid=8403 uid=0 auid=0 msg='PAM: session open acct="root" : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
Jun 4 05:31:05 california kernel: [5378905.345380] audit(1212568265.933:1107876): user pid=7904 uid=0 auid=0 msg='PAM: setcred acct="root" : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
Jun 4 05:31:05 california kernel: [5378905.346431] audit(1212568265.935:1107877): user pid=7904 uid=0 auid=0 msg='PAM: session close acct="root" : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
Jun 4 05:31:14 california kernel: [5378914.210201] audit(1212568274.812:1107878): user pid=7902 uid=0 auid=0 msg='PAM: setcred acct="root" : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
Jun 4 05:31:14 california kernel: [5378914.211438] audit(1212568274.813:1107879): user pid=7902 uid=0 auid=0 msg='PAM: session close acct="root" : exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'
remotamente via ssh, nao atrapalha.. mas .. quando mexendo localmente, esse negocio enche o saco !!!
se alguem souber como desliga isso .. por favor me ajuda !!!
