Auditctl should operate at kernel-level. But this topics are all off-theme from SELinux. You shouldn't post audit questions to a SELinux mailing list. On Mon, 2009-12-14 at 08:11 -0800, Justin P. Mattock wrote: > On 12/14/09 01:56, Guido Trentalancia wrote: > > Have you tried the "-r" option of auditctl ? This would be something > > similar to the kernel printk_ratelimit(). The default is 0, you should > > increase it to a positive value representing a messages/second limit. > > > > Guido > > > > > > yeah but remember I have auditd off. > > I can try and see... > > Justin P. Mattock > -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
