Re: [Touch-packages] [Bug 1873627] Re: auditd fails after moving /var it a new filesystem and turning /var/run into a symlink to /run

Alright, close the bug, I have built two different machines and tried to reproduce the problem several different ways, but have been unable to do so. Sorry to bother you with this. Trey Schisser Waveland Technologies - https://wavelandrcm.com Director of Security Operations and IT Infrastructure

Re: [Touch-packages] [Bug 1873627] Re: auditd fails after moving /var it a new filesystem and turning /var/run into a symlink to /run

filesystem as /run and now everything works. If you give me a couple of days I can throw up a new server and see if I can reproduce the behavior. Trey Schisser Waveland Technologies - https://wavelandrcm.com Director of Security Operations and IT Infrastructure tschis...@wavelandrcm.com *mobile* 512-496

[Touch-packages] [Bug 1873627] [NEW] auditd fails after moving /var it a new filesystem and turning /var/run into a symlink to /run

Public bug reported: Auditd was working on my system (Ubuntu 18.04LTS, kernel 4.15.0-1065-aws) until recently. But after splitting off /var into a new filesystem it fails to launch. running '/sbin/auditd -f' as root indicates a problem writing the pid file (no file exists even when it says one