[Solved] dmesg audit messages

Ask questions about Arch Linux ARM. Please search before making a new topic.

[Solved] dmesg audit messages

Postby froggos » Sun Dec 29, 2019 7:00 pm

Hi, how's it going?

I'm currently trying to set up Arch on a Raspberry Pi 3 B+, and I'm basically having the same issue the user in this post is having: https://bbs.archlinux.org/viewtopic.php?id=247791.
The suggested fix is to look at the kernel parameters/boot stuff, but I'm very confused on what that means (I started Arch like a day ago).

I get that for most computers you'd get a BIOS menu to show up, but that doesn't seem to be the case here. When I power up the RPi, it immediately asks for

$this->bbcode_second_pass_code('', 'hostname login:'), without any other prompting.
Also, I took a look at my /proc/config.gz using zcat. The command

$this->bbcode_second_pass_code('', 'zcat config.gz | grep AUDIT')
returns:
$this->bbcode_second_pass_code('', '
CONFIG_AUDIT=y
CONFIG_HAVE_ARCH_AUDITSYSCALL=y
CONFIG_AUDITSYSCALL-y
CONFIG_AUDIT_WATCH=y
CONFIG_AUDIT_TREE=y
CONFIG_NETFILTER_XT_TARGET_AUDIT=m
CONFIG_AUDIT_GENERIC=y')
However, I can't seem to find a

$this->bbcode_second_pass_code('', 'audit=1')
line anywhere.

What would make these messages go away?

Thank you! :)
Last edited by froggos on Sun Dec 29, 2019 7:44 pm, edited 1 time in total.
froggos
 
Posts: 2
Joined: Sun Dec 29, 2019 6:55 pm

Re: dmesg audit messages

Postby graysky » Sun Dec 29, 2019 7:31 pm

You can either:
$this->bbcode_second_pass_code('', '# systemctl mask systemd-journald-audit.socket')

Or edit /boot/cmdline.txt and append audit=0
$this->bbcode_second_pass_code('', '
root=/dev/mmcblk0p2 rw rootwait console=ttyAMA0,115200 console=tty1 selinux=0 plymouth.enable=0 smsc95xx.turbo_mode=N dwc_otg.lpm_enable=0 kgdboc=ttyAMA0,115200 elevator=noop audit=0')
graysky
Developer
 
Posts: 1876
Joined: Sun Jun 26, 2011 6:56 am
Location: /run/user/1000


Return to User Questions

Who is online

Users browsing this forum: No registered users and 35 guests