Troubleshooting: Removing audit.d - can hang your server

From CPWiki

[edit] Stoping audit:

1. chkconfig audit off
2. service audit stop

[edit] Make sure it's stopped:

ps -ef | grep auditd

It also involves a kernel module (named "auditd"), which you may also want to disable. Doing so will prevent the userspace tools that support auditing from generating errors when they can no longer find /dev/audit.

# service crond stop
# service atd stop
# rmmod audit

Make sure it's gone:

# lsmod | grep audit

Removing from modules and restarting services:

# echo "alias char-major-10-224 off" >> /etc/modules.conf
# service crond start
# service atd start

[edit] Credits

Based on several forum articles like [1]