diff options
| author | Eric Paris <eparis@redhat.com> | 2014-01-13 22:01:06 +0100 |
|---|---|---|
| committer | Eric Paris <eparis@redhat.com> | 2014-01-14 04:33:33 +0100 |
| commit | d7961148258cfe19908b5a29941a8c9f3fa7a4d6 (patch) | |
| tree | 699c34685ed004ce91f973dd8c0a169d8d066808 /Documentation/kernel-parameters.txt | |
| parent | audit: wait_for_auditd rework for readability (diff) | |
| download | linux-d7961148258cfe19908b5a29941a8c9f3fa7a4d6.tar.xz linux-d7961148258cfe19908b5a29941a8c9f3fa7a4d6.zip | |
audit: documentation of audit= kernel parameter
Further documentation of the 3 possible kernel value of the audit
command line option.
Signed-off-by: Eric Paris <eparis@redhat.com>
Diffstat (limited to 'Documentation/kernel-parameters.txt')
| -rw-r--r-- | Documentation/kernel-parameters.txt | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/Documentation/kernel-parameters.txt b/Documentation/kernel-parameters.txt index ab86766e28cb..e81e1d0d8d78 100644 --- a/Documentation/kernel-parameters.txt +++ b/Documentation/kernel-parameters.txt @@ -465,6 +465,14 @@ bytes respectively. Such letter suffixes can also be entirely omitted. audit= [KNL] Enable the audit sub-system Format: { "0" | "1" } (0 = disabled, 1 = enabled) + 0 - kernel audit is disabled and can not be enabled + until the next reboot + unset - kernel audit is initialized but disabled and + will be fully enabled by the userspace auditd. + 1 - kernel audit is initialized and partially enabled, + storing at most audit_backlog_limit messages in + RAM until it is fully enabled by the userspace + auditd. Default: unset audit_backlog_limit= [KNL] Set the audit queue size limit. |