audit 1.2.2 released

[Xin Zhao]

Thanks for your help! You are right. This is the problem. I am using
xeno Linux 2.6.12 without enabling AUDIT when compiling the kernel.
After I did that and recompile the kernel, it works for me.  Really
appreciated for your help!

Now I have to move to next question: can auditd record how much time
each system call uses. I am developing a file system and might want to
monitor all file system related system call to find the performance
bottleneck in my system.

Again, thanks a lot for kind help!

Xin

On 5/23/06, Amy Griffis <amy.griffis at hp.com> wrote:
> On Mon, May 22, 2006 at 03:37:33PM -0400, Xin Zhao wrote:
> > I tried 1.0.14. It compiles without any problem. But after I ran
> > "./auditd", I got the following error messages in /var/log/messages:
> >
> > --------- ERROR MSGS -----------------------------------
> >
> > May 22 15:35:03 shanghai auditd[16985]: Error sending failure mode
> > request (Connection refused)
> > May 22 15:35:03 shanghai auditd[16985]: Unable to set audit pid, exiting
> > May 22 15:35:03 shanghai auditd[16985]: The audit daemon is exiting.
> > May 22 15:35:03 shanghai auditd[16985]: Error sending failure mode
> > request (Connection refused)
> > May 22 15:35:03 shanghai auditd: Cannot daemonize (No child processes)
> > May 22 15:35:03 shanghai auditd: The audit daemon is exiting.
> >
> >
> > What's wrong with it? I am using FC4, but the kernel is 2.6.12 with xen
> > support.
>
> Have you built your kernel with CONFIG_AUDIT?
>
> > Thanks in advance!
> >
> > Xin
>