Re: "Error sending add rule request" using 1.5.4
On Wednesday 09 January 2008 14:37:29 Mathias Gug wrote:
On Wed, Jan 09, 2008 at 02:13:57PM -0500, Steve Grubb wrote:
> On Wednesday 09 January 2008 14:01:39 Brennan, William C wrote:
> I'd start with asking if the kernel supports auditing. Auditctl has no
> dependencies on anything in userspace aside from a normal glibc.
The kernel configuration is the following:
~$ grep -i audit /boot/config-2.6.22-14-generic
CONFIG_AUDIT=y
# CONFIG_AUDITSYSCALL is not set
^^^^^^^ Set this
CONFIG_AUDIT_ARCH=y
Is there another option that should be set ?
-Steve