Troubleshotting: Removing audit.d - can hang your server

From CPWiki

Jump to: navigation, search

Stoping audit:

  1. chkconfig audit off
  2. service audit stop

Make sure it's stopped:

ps -ef | grep auditd


It also involves a kernel module (named "audit"), which you may also want to disable. Doing so will prevent the userspace tools that support auditing from generating errors when they can no longer find /dev/audit. 

# service crond stop
# service atd stop
# rmmod audit


Make sure it's gone: 

# lsmod | grep audit


Removing from modules and restarting services: 

# echo "alias char-major-10-224 off" >> /etc/modules.conf
# service crond start
# service atd start


Credits

Based on several forum articles like [1]

Retrieved from "http://www.cpwiki.org/wiki/Troubleshotting:_Removing_audit.d_-_can_hang_your_server"