Re: problem with auditd restart

2014-10-20 Thread Pankaj Kushwaha
Thanks for the info.. On Fri, Oct 17, 2014 at 7:06 PM, William Roberts bill.c.robe...@gmail.com wrote: Also you don't need to declare your own property Setprop ctl.start named service Setprop ctl.stop named service So to stop auditd Setprop ctl.stop auditd To start just use ctl.start

problem with auditd restart

2014-10-16 Thread Pankaj Kushwaha
Hi, I took auditd mechanism from bit-bucket to collect seandroid denials in audit.log file. Recently I observed that whenever I restart auditd, sometimes it stops logging new audit logs. I am seeing below error in dmesg- 3[ 3130.027258] audit: *NO* daemon at audit_pid=4733 4[ 3130.032157] audit:

Re: problem with auditd restart

2014-10-16 Thread William Roberts
How are you restarting auditd and what's the purpose? Those logs are OK if you kill auditd, however when it starts back up it should start getting the logs. What code base version our you on, google merged the auditd functionality into something called logd. Bill On Oct 15, 2014 11:21 PM,