✏️ 正在编辑: 10-no-audit.rules
路径:
/usr/share/audit/sample-rules/10-no-audit.rules
提示:
您可以编辑任何文件(包括二进制文件),但请注意不当修改可能导致文件损坏。
## This set of rules is to suppress the performance effects of the ## audit system. The result is that you only get hardwired events. -D ## This suppresses syscall auditing for all tasks started ## with this rule in effect. Remove it if you need syscall ## auditing. -a task,never
💾 保存文件
← 返回文件管理器