On Monday 15 May 2006 15:57, Michael C Thompson wrote:
auditctl is still reporting the "error sending rule"
problem. Here are
my auditctl and kernel versions:
auditctl version 1.2.2
2.6.16-1.2200.2.2_FC6.lspp.25
# auditctl -l
Error sending rule list request (Operation not permitted)
This is not the error sending rule problem. This looks like a permission
problem. What selinux policy and role are you doing this from? Are there any
relevant AVCs in the audit logs from this time?
-Steve