On Monday 15 May 2006 15:57, Michael C Thompson wrote: > auditctl is still reporting the "error sending rule" problem. Here are > my auditctl and kernel versions: > > auditctl version 1.2.2 > 2.6.16-1.2200.2.2_FC6.lspp.25 > > # auditctl -l > Error sending rule list request (Operation not permitted)
This is not the error sending rule problem. This looks like a permission problem. What selinux policy and role are you doing this from? Are there any relevant AVCs in the audit logs from this time? -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
