From 949e1fdd5214bad52b4679a8ba1f3a98d5ce956e Mon Sep 17 00:00:00 2001 From: Daan De Meyer Date: Sun, 7 May 2023 11:29:28 +0200 Subject: [PATCH] mkosi: Disable auditd in the preset instead of masking it --- mkosi.conf.d/10-systemd.conf | 1 - .../mkosi.extra/usr/lib/systemd/system-preset/00-mkosi.preset | 3 +++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/mkosi.conf.d/10-systemd.conf b/mkosi.conf.d/10-systemd.conf index 6dc6443a85..a19d464a09 100644 --- a/mkosi.conf.d/10-systemd.conf +++ b/mkosi.conf.d/10-systemd.conf @@ -22,7 +22,6 @@ KernelCommandLineExtra=systemd.crash_shell systemd.log_ratelimit_kmsg=0 systemd.journald.forward_to_console systemd.journald.max_level_console=warning - systemd.mask=auditd # Tell the kernel to only log warning and up to the console. loglevel=4 # Disable the kernel's ratelimiting on userspace logging to kmsg. diff --git a/mkosi.presets/00-base/mkosi.extra/usr/lib/systemd/system-preset/00-mkosi.preset b/mkosi.presets/00-base/mkosi.extra/usr/lib/systemd/system-preset/00-mkosi.preset index fbc64f4b39..25eb76f446 100644 --- a/mkosi.presets/00-base/mkosi.extra/usr/lib/systemd/system-preset/00-mkosi.preset +++ b/mkosi.presets/00-base/mkosi.extra/usr/lib/systemd/system-preset/00-mkosi.preset @@ -23,3 +23,6 @@ enable systemd-networkd-wait-online.service # have dnf create its cache. disable dnf-makecache.timer disable dnf-makecache.service + +# We have journald to receive audit data so let's make sure we're not running auditd as well +disable auditd.service -- 2.25.1