System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

Importance of audit service on RHEL AS 3.0

skt_skt
Honored Contributor

Importance of audit service on RHEL AS 3.0



What is the advantage and disadvantage of keeping the audit service running.
3 REPLIES
Steven E. Protter
Exalted Contributor

Re: Importance of audit service on RHEL AS 3.0

Shalom,

Advantage: If someone does something nefarious, you have some records.

Disadvantage: It uses cpu and disk resources and many people have never bothered to learn how to use the data.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
skt_skt
Honored Contributor

Re: Importance of audit service on RHEL AS 3.0


It makes system hang if the /var file system reaches 80% usage which is controled by the default settings.No other way other than reboot as it stops accepting any system calls. "man audit" for more details.

Any other comments from any one else?
skt_skt
Honored Contributor

Re: Importance of audit service on RHEL AS 3.0

Nothing more to discuss on this.