Re: audit 1.2.2 released
Thanks for your help! You are right. This is the problem. I am using
xeno Linux 2.6.12 without enabling AUDIT when compiling the kernel.
After I did that and recompile the kernel, it works for me. Really
appreciated for your help!
Now I have to move to next question: can auditd record how much time
each system call uses. I am developing a file system and might want to
monitor all file system related system call to find the performance
bottleneck in my system.
Again, thanks a lot for kind help!
Xin
On 5/23/06, Amy Griffis <amy.griffis(a)hp.com> wrote:
On Mon, May 22, 2006 at 03:37:33PM -0400, Xin Zhao wrote:
> I tried 1.0.14. It compiles without any problem. But after I ran
> "./auditd", I got the following error messages in /var/log/messages:
>
> --------- ERROR MSGS -----------------------------------
>
> May 22 15:35:03 shanghai auditd[16985]: Error sending failure mode
> request (Connection refused)
> May 22 15:35:03 shanghai auditd[16985]: Unable to set audit pid, exiting
> May 22 15:35:03 shanghai auditd[16985]: The audit daemon is exiting.
> May 22 15:35:03 shanghai auditd[16985]: Error sending failure mode
> request (Connection refused)
> May 22 15:35:03 shanghai auditd: Cannot daemonize (No child processes)
> May 22 15:35:03 shanghai auditd: The audit daemon is exiting.
>
>
> What's wrong with it? I am using FC4, but the kernel is 2.6.12 with xen
> support.
Have you built your kernel with CONFIG_AUDIT?
> Thanks in advance!
>
> Xin