From: Steve Grubb <sgrubb@redhat.com>
To: Rituraj Buddhisagar <rituraj@vayana.com>
Cc: linux-audit@redhat.com
Subject: Re: Audisp-remote - connection refused.
Date: Tue, 03 Oct 2017 16:22:40 -0400 [thread overview]
Message-ID: <3549698.YC68fSqtMQ@x2> (raw)
In-Reply-To: <CAPHnQ1C9-V0BM+4ooRN4GJKL5qO9GA6ZGzKp6pJNoFVkXZLNHA@mail.gmail.com>
On Tuesday, October 3, 2017 4:00:27 PM EDT Rituraj Buddhisagar wrote:
> Steve,
>
> Here is the relevant discussion on disabling the tcp listener on Ubuntu.
> https://www.redhat.com/archives/linux-audit/2012-September/msg00027.html
>
> I do not know what exactly caused change - but now I think it should be
> enabled in distributions.
>
> Please let me know.
>
> Btw, I got auditd running (by setting LD_LIBRARY_PATH variable) from source
> now. Still audispd is not started now - what is the way / sequence to start
> auditd and audispd - if you can point me to some reference or a startup
> script will help.
Since you installed in a non-standard location, you probably need to adjust
paths in the config files.
What I would recommend is not to build and install by hand, but to use their
package manager to build a new package with listening enabled. The ./configure
script takes a --disable-listener parameter. So, its probably as simple as
deleting that in the source package and rebuilding.
That said, I have no idea how to build a package on Debian or Ubuntu.
-Steve
next prev parent reply other threads:[~2017-10-03 20:22 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-10-02 18:55 Audisp-remote - connection refused Rituraj Buddhisagar
2017-10-02 19:51 ` Rituraj Buddhisagar
2017-10-02 21:58 ` Steve Grubb
2017-10-03 3:31 ` Rituraj Buddhisagar
2017-10-03 12:44 ` Steve Grubb
2017-10-03 12:52 ` Rituraj Buddhisagar
2017-10-03 12:58 ` Rituraj Buddhisagar
2017-10-03 15:08 ` Steve Grubb
2017-10-03 18:40 ` Rituraj Buddhisagar
2017-10-03 19:08 ` Rituraj Buddhisagar
2017-10-03 20:00 ` Rituraj Buddhisagar
2017-10-03 20:22 ` Steve Grubb [this message]
2017-10-04 14:01 ` Rituraj Buddhisagar
2017-10-04 15:19 ` Steve Grubb
2017-10-04 16:02 ` Rituraj Buddhisagar
2017-10-04 16:28 ` Steve Grubb
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3549698.YC68fSqtMQ@x2 \
--to=sgrubb@redhat.com \
--cc=linux-audit@redhat.com \
--cc=rituraj@vayana.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.