auditd fails to start on FC6 system, newer kernels effect?

[Steve Grubb]

On Monday 19 November 2007 01:23:25 pm Stephen Smalley wrote:
> > Connection refused sounds as if something else isn't running that should
> > be, but no direct clue, so what else needs to run too, before auditd?

Nothing else needs to be running. The audit daemon is one of the first user 
space daemons started by design.


> More of a question for linux-audit (cc'd).  Offhand, I'd guess that the
> ECONNREFUSED is coming from the netlink code, but I don't know why.

Right. It would be good to know if this was due to connect() failing. FWIW, I 
have not tested the audit system on 2.6.24 at all yet.

-Steve