auditctl -l bug?

[Michael C Thompson]

linux-audit-bounces at redhat.com wrote on 03/28/2006 06:31:30 PM:

> On Tuesday 28 March 2006 18:23, Mont Rothstein wrote:
> > I am on audit-1.0.12 is this still a bug in this version, and if it is 
do I
> > need to worry about it?
> >
> > My output from uname -a is:
> >
> > Linux rheles4rs1.forayadams.foray.com 2.6.9-11.EL #1 Fri May 20 
18:17:57
> > EDT 2005 i686 i686 i386 GNU/Linux
> 
> I think you need to be on the 2.6.9-.16.EL kernel at a minimum. Offhand 
I 
> don't remember what's the current RHEL4 kernel, but you need to upgrade 
> kernels for it to work right.
> 
> -Steve

Hey Steve,

With a yum upgrade against FC5, using "auditctl -l" yields:
# auditctl -l
Error sending rule list request (Operation not permitted)
File system watches not supportedctl -l for the first time yeilds:

After this, any subsequent "auditctl -l" commands will yeild:
# auditctl -l
No rules
File system watches not supported


Am I the only one seeing this, and if so, any suggestions on what I can do 
to track this down?

Thanks,
Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20060329/1ac17a2f/attachment.htm>