Hi, I'm running "Red Hat Enterprise Linux AS release 4 (Nahant Update 3)" With a customized kernel version 2.6.32. And auditctl version 1.0.12
When I run auditctl -l, I got the following error: # auditctl -l No rules File system watches not supported What options could be missing in my kernel config? I've enabled everything related to "AUDIT" # zgrep AUDIT /proc/config.gz CONFIG_AUDIT_ARCH=y CONFIG_AUDIT=y CONFIG_AUDITSYSCALL=y CONFIG_AUDIT_TREE=y -- Best Regards, Aaron Lewis - PGP: 0xDFE6C29E ( http://keyserver.veridis.com ) Finger Print: 9482 448F C7C3 896C 1DFE 7DD3 2492 A7D0 DFE6 C29E -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
