Hello!
So, the solution appears to be: keep all audit-related binaries on boot.iso, run auditctl -e 0 instead of our mock, and the result is roughly the same. So that's what we will do.
Best,
Vladimir
On Thu, Sep 15, 2022 at 2:11 PM Vladimir Slavik <vslavik@xxxxxxxxxx> wrote:
Hello,while trying to make sense of the remaining C bits in anaconda, I found that we actually have a mock auditd, which does nothing and replaces the real auditd on boot.iso, via lorax templates.Now I'm trying to understand why. Is it because it writes too much to journal? Is it because it takes 90 MB memory? Something else?Steve, Brian - would you know?PS: https://github.com/rhinstaller/anaconda/pull/4331 - moving it from the python module directory where it was hiding.Best,Vladimir
--
Vladimír Slávik <vslavik@xxxxxxxxxx>
Software Engineer, Platform EngineeringRed Hat Czech, s.r.o.
_______________________________________________ Anaconda-devel mailing list -- anaconda-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to anaconda-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/anaconda-devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
