Public bug reported:
The `tcp_listen_port` option in `/etc/auditd.conf` does work in the way
that is described in the 'auditd.conf` manual page.
When this option is specified it is silently ignored and no warning is
shown in the journald log.
When run with `auditd -f` there is a warning message:
"Listener support is not enabled, ignoring value at line"
It appears that the daemon has been compiled without support for the listener
code.
But the manual page still states that this option is supported.
It can take a user many hours to work out why the option is not
functioning as the manual pages says it should.
Either support for the listener code should be included or the manual
page should be modified to indicate that this option will not work on
Ubuntu.
** Affects: auditd (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2077177
Title:
tcp_listen_port option does not work
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/auditd/+bug/2077177/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
