Re: auditd start failure
On Friday, August 16, 2013 11:38:32 AM zhu xiuming wrote:
HI
Suddently, my auditd can't start. I do not know why.
I remember I changed some permission settings on /var/log/audit. However,
even I change it back, the auditd cann't be started.
I looked at the audit.log. It only shows the daemon is closed successfully
I wonder whether there is other log file I should look.
Its writes failure messages to /var/log/messages. I sometimes troubleshoot
issues by starting the daemon by hand in the foreground mode so that
everything is written to the screen. /sbin/auditd -f
-Steve