On Wednesday 09 January 2008 14:37:29 Mathias Gug wrote: > On Wed, Jan 09, 2008 at 02:13:57PM -0500, Steve Grubb wrote: > > On Wednesday 09 January 2008 14:01:39 Brennan, William C wrote: > > I'd start with asking if the kernel supports auditing. Auditctl has no > > dependencies on anything in userspace aside from a normal glibc. > > The kernel configuration is the following: > > ~$ grep -i audit /boot/config-2.6.22-14-generic > CONFIG_AUDIT=y > # CONFIG_AUDITSYSCALL is not set
^^^^^^^ Set this > CONFIG_AUDIT_ARCH=y > > Is there another option that should be set ? -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
