Thanks for your help! You are right. This is the problem. I am using xeno Linux 2.6.12 without enabling AUDIT when compiling the kernel. After I did that and recompile the kernel, it works for me. Really appreciated for your help!
Now I have to move to next question: can auditd record how much time each system call uses. I am developing a file system and might want to monitor all file system related system call to find the performance bottleneck in my system. Again, thanks a lot for kind help! Xin On 5/23/06, Amy Griffis <[EMAIL PROTECTED]> wrote:
On Mon, May 22, 2006 at 03:37:33PM -0400, Xin Zhao wrote: > I tried 1.0.14. It compiles without any problem. But after I ran > "./auditd", I got the following error messages in /var/log/messages: > > --------- ERROR MSGS ----------------------------------- > > May 22 15:35:03 shanghai auditd[16985]: Error sending failure mode > request (Connection refused) > May 22 15:35:03 shanghai auditd[16985]: Unable to set audit pid, exiting > May 22 15:35:03 shanghai auditd[16985]: The audit daemon is exiting. > May 22 15:35:03 shanghai auditd[16985]: Error sending failure mode > request (Connection refused) > May 22 15:35:03 shanghai auditd: Cannot daemonize (No child processes) > May 22 15:35:03 shanghai auditd: The audit daemon is exiting. > > > What's wrong with it? I am using FC4, but the kernel is 2.6.12 with xen > support. Have you built your kernel with CONFIG_AUDIT? > Thanks in advance! > > Xin
-- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
