Skip to content

Commit

Permalink
audit: documentation of audit= kernel parameter
Browse files Browse the repository at this point in the history
Further documentation of the 3 possible kernel value of the audit
command line option.

Signed-off-by: Eric Paris <eparis@redhat.com>
  • Loading branch information
Eric Paris committed Jan 14, 2014
1 parent c81825d commit d796114
Showing 1 changed file with 8 additions and 0 deletions.
8 changes: 8 additions & 0 deletions Documentation/kernel-parameters.txt
Original file line number Diff line number Diff line change
Expand Up @@ -465,6 +465,14 @@ bytes respectively. Such letter suffixes can also be entirely omitted.

audit= [KNL] Enable the audit sub-system
Format: { "0" | "1" } (0 = disabled, 1 = enabled)
0 - kernel audit is disabled and can not be enabled
until the next reboot
unset - kernel audit is initialized but disabled and
will be fully enabled by the userspace auditd.
1 - kernel audit is initialized and partially enabled,
storing at most audit_backlog_limit messages in
RAM until it is fully enabled by the userspace
auditd.
Default: unset

audit_backlog_limit= [KNL] Set the audit queue size limit.
Expand Down

0 comments on commit d796114

Please sign in to comment.