<tt>linux-audit-bounces@redhat.com wrote on 03/28/2006 06:31:30 PM: > On Tuesday 28 March 2006 18:23, Mont Rothstein wrote: > > I am on audit-1.0.12 is this still a bug in this version, and if it is do I > > need to worry about it? > > > > My output from uname -a is: > > > > Linux rheles4rs1.forayadams.foray.com 2.6.9-11.EL #1 Fri May 20 18:17:57 > > EDT 2005 i686 i686 i386 GNU/Linux > > I think you need to be on the 2.6.9-.16.EL kernel at a minimum. Offhand I > don't remember what's the current RHEL4 kernel, but you need to upgrade > kernels for it to work right. > > -Steve</tt> <tt>Hey Steve,</tt> <tt>With a yum upgrade against FC5, using "auditctl -l" yields:</tt> <tt># auditctl -l</tt> <tt>Error sending rule list request (Operation not permitted)</tt> <tt>File system watches not supportedctl -l for the first time yeilds:</tt> <tt>After this, any subsequent "auditctl -l" commands will yeild:</tt> <tt># auditctl -l</tt> <tt>No rules</tt> <tt>File system watches not supported</tt> <tt>Am I the only one seeing this, and if so, any suggestions on what I can do to track this down?</tt> <tt>Thanks,</tt> <tt>Mike</tt>