auid unset

Kirkwood, David A. DAVID.A.KIRKWOOD at saic.com
Fri Dec 7 14:30:13 UTC 2007


Thanks Steve. That worked. What I don't understand is that it is not in
the system that already worked.

Thanks again,

David A. Kirkwood

>On Thursday 06 December 2007 02:42:30 pm Kirkwood, David A. wrote:
>> The ausearch -m DAEMON_START returns version 1.0.14 for auditd on
both
>> systems. I grepped for loginuid.so in the pam.d directory and it
appears >>in
>> all of the same pam entries on both systems. No luck yet, however I
>> appreciate your help.

>Do you have audit=1 as kernel boot option?

>-Steve




More information about the Linux-audit mailing list