On Wed, Jan 09, 2008 at 02:13:57PM -0500, Steve Grubb wrote: > On Wednesday 09 January 2008 14:01:39 Brennan, William C wrote: > I'd start with asking if the kernel supports auditing. Auditctl has no > dependencies on anything in userspace aside from a normal glibc. >
The kernel configuration is the following: ~$ grep -i audit /boot/config-2.6.22-14-generic CONFIG_AUDIT=y # CONFIG_AUDITSYSCALL is not set CONFIG_AUDIT_ARCH=y Is there another option that should be set ? -- Mathias -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
