This means: Keep all things from the audit package as-is, do not erase or
overwrite.
Previously:
- clean up most things audit in the template
- install a custom replacement for auditd from the anaconda packages
- in anaconda, run the replacement manually
Now:
- keep audit things as they are
- do not install the custom replacement
- in anaconda, run "auditctl -e 0" instead of the custom binary
Overall goals remain the same and met:
- keep boot.iso small: this adds +200 KiB-ish
- do not run auditd to lower runtime memory requirements: still ok
- do not spam journal/syslog with audit messages: still ok
Note: Most audit messages come from dracut, where it is not turned off
anyway.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
ab80801921