Okay, so I edited the kernal configuration to enable system call auditing, as suggested in the posting by Steve Grubb. Then I recompiled the kernel and installed it.
To my delight, the problems went away and "auditctl" now seems to work. Thanks Steve! -- Bill -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
