[arch-dev-public] Trimming down our default kernel configuration

Connor Behan connor.behan at gmail.com
Fri Mar 28 01:25:13 EDT 2014


On 27/03/14 08:24 AM, thomas at archlinux.org wrote:
> Am 27.03.2014 09:52, schrieb Connor Behan:
>> On 27/03/14 01:07 AM, thomas at archlinux.org wrote:
>>> Am 26.03.2014 20:08, schrieb Dave Reisner:
>>>> Looks like audit is still built into our kernel. Wasn't this meant to be
>>>> reverted as well?
>>> Forgot about that. That was pulled in by AppArmor or so.
>> Wasn't it pulled in by http://bugs.archlinux.org/task/12584 and the fact
>> that community/audit came out shortly after?
> No, it was pulled in accidentally as a dependency of AppArmor.
I doubt that. AppArmor was enabled a year and a half after audit was.

https://projects.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/kernel26&id=e46bc1d41848b258a138df26590967dc1e0a3417

https://projects.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/kernel26&id=688e0f7508fa943868470e9d6c0dcb12823b06f0
> If we actually want audit, we should support it as well. Our systemd
> package is compiled with -AUDIT for example.
>
> Since audit is one of those "enabled unless the user intervenes" option
> that also does annoying things, I would like to get rid of it in our kernel.
It is supported if you count [community] packages. I'll ask on the LKML
if anything can be done about the logging.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 555 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.archlinux.org/pipermail/arch-dev-public/attachments/20140327/6c199b0e/attachment.asc>


More information about the arch-dev-public mailing list