From 16b3e26da4455c6d3f876639ce27ce6cd40d6895 Mon Sep 17 00:00:00 2001 From: Tuomas Tynkkynen Date: Mon, 22 Aug 2016 18:11:53 +0300 Subject: [PATCH] audit: Disable by default Because in its default enabled state it it causes a global performance hit on all system calls (https://fedorahosted.org/fesco/ticket/1311) and unwanted spam in dmesg, in particular when using Chromium (https://github.com/NixOS/nixpkgs/issues/13710). --- nixos/modules/security/audit.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nixos/modules/security/audit.nix b/nixos/modules/security/audit.nix index 8d70811b01c..ebfe594d0c7 100644 --- a/nixos/modules/security/audit.nix +++ b/nixos/modules/security/audit.nix @@ -55,7 +55,7 @@ in { security.audit = { enable = mkOption { type = types.enum [ false true "lock" ]; - default = true; # The kernel seems to enable it by default with no rules anyway + default = false; description = '' Whether to enable the Linux audit system. The special `lock' value can be used to enable auditing and prevent disabling it until a restart. Be careful about locking