auditaudit: Fix to improve sycallsaudit: Fix to improve sycallsFor 10.3 release, auditd was started in a manner which
enabled syscall auditing. This is the default behaviour for
the audit daemon package but was a change from earlier SuSE
releases.
This update restores the old 10.2 and earlier behaviour
whereby auditd will not enable the creation of audit
contexts thereby avoiding the resultant syscall performance
overhead.
Whether auditd should disable the creation of syscall
contexts at startup is controlled by the value
AUDITD_DISABLE_CONTEXTS in /etc/sysconfig/auditd.
The default is AUDITD_DISABLE_CONTEXTS=yes which will cause
auditd to be started with the options "-s disable"
preventing the creation of syscall contexts.
Note this will prevent the generation of any syscall and
filewatch auditing data using 'auditctl'. If you require
such functionality, either comment out
AUDITD_DISABLE_CONTEXTS or set it to the value 'no'.
For 10.3 release, auditd was started in a manner which
enabled syscall auditing. This is the default behaviour for
the audit daemon package but was a change from earlier SuSE
releases.
This update restores the old 10.2 and earlier behaviour
whereby auditd will not enable the creation of audit
contexts thereby avoiding the resultant syscall performance
overhead.
Whether auditd should disable the creation of syscall
contexts at startup is controlled by the value
AUDITD_DISABLE_CONTEXTS in /etc/sysconfig/auditd.
The default is AUDITD_DISABLE_CONTEXTS=yes which will cause
auditd to be started with the options "-s disable"
preventing the creation of syscall contexts.
Note this will prevent the generation of any syscall and
filewatch auditing data using 'auditctl'. If you require
such functionality, either comment out
AUDITD_DISABLE_CONTEXTS or set it to the value 'no'.
recommendedauditi58602c113e021436d7ae8c849e83e24d1a9d6995b8248c87f68d18df26748cc4ecc964d20ae0fa41845082fcc8f708ab3206000013c15883fad209e83efauditppcf81daa7092939ff26c51c681c3cc0498de08bd282a3c1086b9727cdf0b735e25ce15342b9bcb5d7737048aa019a994a15fab34f2d3a856bd7b42e7e8auditx86_64fd6423b169c05864aa6f12b4a231d05411e3875610bde46e62f35e4709ecd647eb9e83b637876fae6809499ceb4acc83638a5d64391627701faf2ccdaudit-develi5869a123a8648156ec135fdebd7c4c4f7446ada40c296fc4e5076bd490d59900cf7c94f6387758c6bac2d133fd6d2d38b8a3ecd5b404d3ae7f5d2f8bceaaudit-develppc2c30f751989295c4d3d0ca8d8d1986e346ba067c588d391ff869b1e8c889e879efa722a79f882bccaudit-develx86_6446b655b2fbf059b6def54132d3cb8324c4427db181363ca91487d6629f28854a5d834a588778e814audit-libsi586adf3d044df45bf58ef627a234ce71177b67e08fbaa0cdd66c4439d0c8bf071f727e7199fab15252d3986ff220ae6d50f689754759d7e704d82ff0c41audit-libsppcd386146e6639f8ca60a7266b2bd1191fdbccd1532d6be7cd16814fca0e076e28b37bcd0350fb6b35de8c5923a0a366248c9ca671a8dfd733250068baaudit-libsx86_64278283b67836ef392dfb74df01a95f611bc7fc4fb4d61abdd7de2bddcd1a96e551352e4c9b26b20ed13b6d7ae8f09d809753b8e073b2320185a80719audit-libs-32bitx86_64e11869a5b32c7b6e2599d0e94a48a88921cd8384b3879cf05c1c15a436cf185ef77e6392bc7c2709e0d134bf3296105c4cbf8f1aed075a3e2a8a6197audit-libs-64bitppcc48278929959bcd8d4f2d5339a2282ca6e0a9b9a8c5bd70125402622b881f43d487364ae9980e7ef5876a5597f7b7be48e8504768396f77c6c0b4d3caudit-libs-pythoni586d609d5a572e397cec1ff36f3ef2b1053572f531dbd4fab5fa582b6bc53f30a97ce27cda7dd00b1daa791d349667ba9d34a4ed9dd7efcddab40f7e87eaudit-libs-pythonppc16ed0e73d171eee846f593d1ab073bfd46f48e23audit-libs-pythonx86_647d093646ecf59263243bad9738f57db90ae6dfe3408a5422c23bb57fd027cc8f25420a6b12fd7f52de1d925151a94b919c3c520d44ed94886891435e