"Error sending add rule request" using 1.5.4

Mathias Gug mathiaz at ubuntu.com
Wed Jan 9 19:37:29 UTC 2008


On Wed, Jan 09, 2008 at 02:13:57PM -0500, Steve Grubb wrote:
> On Wednesday 09 January 2008 14:01:39 Brennan, William C wrote:
> I'd start with asking if the kernel supports auditing. Auditctl has no 
> dependencies on anything in userspace aside from a normal glibc.
> 

The kernel configuration is the following:

~$ grep -i audit /boot/config-2.6.22-14-generic 
CONFIG_AUDIT=y
# CONFIG_AUDITSYSCALL is not set
CONFIG_AUDIT_ARCH=y

Is there another option that should be set ?

--
Mathias




More information about the Linux-audit mailing list