X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=man%2Fsystemd-nspawn.xml;h=1bc61e83a76b048e3f27582a30fc30e4aed65fbc;hb=3ae83f9896bff49679c8a60e6ff9520557df8b16;hp=cab5990a567b793f218201a3b109e71dcb0e04e4;hpb=f8964235e69f58225dec378437b1789744cd22a9;p=elogind.git

diff --git a/man/systemd-nspawn.xml b/man/systemd-nspawn.xml
index cab5990a5..1bc61e83a 100644
--- a/man/systemd-nspawn.xml
+++ b/man/systemd-nspawn.xml
@@ -144,6 +144,19 @@
                 contain this file out-of-the-box.</para>
         </refsect1>
 
+        <refsect1>
+                <title>Incompatibility with Auditing</title>
+
+                <para>Note that the kernel auditing subsystem is
+                currently broken when used together with
+                containers. We hence recommend turning it off entirely
+                by booting with <literal>audit=0</literal> on the
+                kernel command line, or by turning it off at kernel
+                build time. If auditing is enabled in the kernel
+                operating systems booted in an nspawn container might
+                refuse log-in attempts.</para>
+        </refsect1>
+
         <refsect1>
                 <title>Options</title>