I notice there are some kernel command line parameters like below, which from Manual:
audit= [KNL] Enable the audit sub-system
Format: { "0" | "1" | "off" | "on" }
0 | off - kernel audit is disabled and can not be
enabled until the next reboot
unset - kernel audit is initialized but disabled and
will be fully enabled by the userspace auditd.
1 | on - kernel audit is initialized and partially
enabled, storing at most audit_backlog_limit
messages in RAM until it is fully enabled by the
userspace auditd.
Default: unset
audit_backlog_limit= [KNL] Set the audit queue size limit.
Format: <int> (must be >=0)
Default: 64
which has the Default value, so if I am not set it in the grub GRUB_CMDLINE_LINUX
line, and also not set it during the boot, how do I check that it is indeed using the Default
value?
The reason why I have such a problem is because there are so many different Linux distribution, I just want to check whether this Linux distribution change the default value. So want to check it in my eyes in the running Linux distribution.
Or is there anything I misunderstand?