centos 6.8 log messages: Audit daemon rotating log files

ftp 一直被使用者連線，造成audit log一直增長，一直rotate，messages一直告警"Audit daemon rotating log files"

調整auditd的設定
* vi /etc/audit/auditd.conf
> 改 max_log_file = 6，單位是M，audit log到6M就做rotate，把他改到一個合適的值，這樣就會OK

reference:
https://linux.die.net/man/8/auditd.conf
> max_log_file
This keyword specifies the maximum file size in megabytes. When this limit is reached, it will trigger a configurable action. The value given must be numeric.