From mboxrd@z Thu Jan 1 00:00:00 1970 From: Gisela Cheng Subject: How to make audit available Date: Mon, 17 Nov 2014 14:21:22 -0500 Message-ID: Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2339735627999006552==" Return-path: Received: from mx1.redhat.com (ext-mx13.extmail.prod.ext.phx2.redhat.com [10.5.110.18]) by int-mx14.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id sAHJLVIX002023 for ; Mon, 17 Nov 2014 14:21:31 -0500 Received: from e8.ny.us.ibm.com (e8.ny.us.ibm.com [32.97.182.138]) by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id sAHJLSSi012862 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Mon, 17 Nov 2014 14:21:29 -0500 Received: from /spool/local by e8.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Mon, 17 Nov 2014 14:21:27 -0500 Received: from b01cxnp22033.gho.pok.ibm.com (b01cxnp22033.gho.pok.ibm.com [9.57.198.23]) by d01dlp01.pok.ibm.com (Postfix) with ESMTP id B47A938C8039 for ; Mon, 17 Nov 2014 14:19:44 -0500 (EST) Received: from d01av02.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by b01cxnp22033.gho.pok.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id sAHJLPiS26935478 for ; Mon, 17 Nov 2014 19:21:25 GMT Received: from d01av02.pok.ibm.com (localhost [127.0.0.1]) by d01av02.pok.ibm.com (8.14.4/8.14.4/NCO v10.0 AVout) with ESMTP id sAHJLPPw014017 for ; Mon, 17 Nov 2014 14:21:25 -0500 Received: from d01ml065.pok.ibm.com (d01ml065.pok.ibm.com [9.63.8.15]) by d01av02.pok.ibm.com (8.14.4/8.14.4/NCO v10.0 AVin) with ESMTP id sAHJLO7o013974 for ; Mon, 17 Nov 2014 14:21:24 -0500 List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com --===============2339735627999006552== Content-type: multipart/related; Boundary="0__=0ABBF700DFFA70EB8f9e8a93df938690918c0ABBF700DFFA70EB" --0__=0ABBF700DFFA70EB8f9e8a93df938690918c0ABBF700DFFA70EB Content-type: multipart/alternative; Boundary="1__=0ABBF700DFFA70EB8f9e8a93df938690918c0ABBF700DFFA70EB" --1__=0ABBF700DFFA70EB8f9e8a93df938690918c0ABBF700DFFA70EB Content-type: text/plain; charset=US-ASCII Hello, I am running 'Linux zp93k1 3.10.0-123.e17.6.s390x .... When I check audit status: So audit function is missing from the kernel. How do I make it available? Thanks. Gisela Cheng giselac@us.ibm.com --1__=0ABBF700DFFA70EB8f9e8a93df938690918c0ABBF700DFFA70EB Content-type: text/html; charset=US-ASCII Content-Disposition: inline

Hello,

I am running 'Linux zp93k1 3.10.0-123.e17.6.s390x .... When I check audit status:

So audit function is missing from the kernel. How do I make it available?

Thanks.

Gisela Cheng
giselac@us.ibm.com
--1__=0ABBF700DFFA70EB8f9e8a93df938690918c0ABBF700DFFA70EB-- --0__=0ABBF700DFFA70EB8f9e8a93df938690918c0ABBF700DFFA70EB Content-type: image/gif; name="11592198.gif" Content-Disposition: inline; filename="11592198.gif" Content-ID: <1__=0ABBF700DFFA70EB8f9e8a93df938@us.ibm.com> Content-transfer-encoding: base64 R0lGODlhawE1AOUAAAAAALi4uKBoKChooEgAAABIgIBIAGgoALi4gAAoaGiguAAASLigaGigoKC4 uGiggEiAuDhIcIC4uICgaKiwwLi4oCAoQDhIeEiAoKCASKCgaKiowICAgLiASCgwQGhogICAoIC4 oCgoQDhAcEBQeDhIaEBQcABISKC4gKC4oCAoOIBISIC4gLiAgDhAaEhQcKiwuLigoCgoOCgwOEBI aEBQaKiouEBIeGgoSAAAAAAAAAAAAAAAAAAAAAAAAAAAACwAAAAAawE1AEAI/wAjjNhgAYDBgwgT KlzIsKHDhxAjSpxIsaLFixgzatzIsaNHhhcuUPCAcICAhAUCMABQwAAABSdZrnwZs8BMAA8IJMRw AIKBAjEHuEyQ4oBBBQh0JkCh06bBAUkNLpCgEmGDA1B1HgQK8YRWBS4BCDXIdUEIo1Nvio15MOdC kygF8Hzo9WjYsSxPmkUrQS1chG4RQujwtIJRnFoT/rX4F4Laj5AjT3xhYqTky5gza97MubPnzxJH DFTxNEBVhClXtiRbdTVMsjdTswy7se7Lu2HLngWQtiRbg4EfNp6Jl+vLqEt1IlXKlCbsra3DBneY de3RmjenC/9dfTHDq9UBXP99Gju62Kh/x4v1+xt05wgRKBR0T7++/fv48+s3CJ9g3oW2gfUUekER eN1zwCXm0GsyHYVcc+oNQJyBDXUXU4TZKXiQd09xR6F4WEXVUIC4kaXXbr1t2J52DA13YIMADFbY YeCJiGFbGu6no0EhUSDCjkAGKeSQRHrW33zupXRakfslkIFxTEYpZUYkkGCZigdNZZppYSXgwJZd fskldAGImNxtBkGw5WkNgLBlTVsSJhVVSypgmJoBnISnaY8pZloFbg71ZQUf5MnSli30peWWIiop Yoc7HcCinwEAGoCglRZ6kpIBJMrAoqY1GmpiCoBJZlSglpnjQ6WOOiV9JZT/AIMMr9Zq6624fnak WGuqmqpLvxrkpanBdjTAn4ECMCyhhnLqaaqiqrogo1otq6l4bpp2YbaGKivmpbzROSZr0rbIpZIn DTvuoeUuBC0Bx16KbkN29qTtUdQGG+9P976Ur7jt5spQBCIhKfDBCCessEI9ItkquLxWGui+6FJ8 r7oQs/voQhiH1eabBz2clMXdKkRyTCJr5ahO77578kt39vsWsuBa2yyiigIc7cYKpSzst7Q9HFa9 eKJMLbk8L9wRfPLVp2SfSkPmJJRRV42faP5ZrfXWXNtHsI++RabdX1RL5FSMMTkGqUHqbdhB2R8t MMFDk3JYQAd4RSY33asu/1R3e13XV+WVa2/1m5MI8YT4QXMhFumwNxF1GNuT5y3V3AntfRQHPMOd +W5ilfgflAloEDZgqy6WKuBZgo5XcZuyVfrpOCKkuUJ/c3R24BdRRjivhu3XKtRaa8k678hvVgMN MMyQ/PPQRx9RCS7YQJp1yppu9e0MTTqk9xqBH1nbnHFY9a7Yx6UQ1Ysb1LjnGe31lOhcka594QlW dDbslG/oUttCaR8A3gc48fnPRMrKQOIOY0DahQ6BC+KcVriHmvbwj4IOtBr6pOeZ4SHEgxwMIWcu EB+DifCEKDxfCdMkp2PR5jINZFLuMEI+vWGuITHsSA1x2LcUHmRXs/vcYf9el5ugFDGBC8zfQwQ4 FwAaAIMP/E+FjghFx5kMcN7h3+aSZjvX0S92Bwki/qw4Eacw8QBVVIAEL9e9HvoQAA27FQjfSMcT 9uhHdcyjHpmENRPu8Y+AvM8GA0nIQhopPngsTfAyI7kYvXAieJJTaeq0SMGUDDIpStPxbEeV9jjJ ch7JJNogE69NGhIiPSIJlkKWp2OJqFWPgqVSvgUxnhhvknyCWaEqNcSwYHAx4HGVFB3CqaCAS00x UdcKMFfKMNLyhd7Z05IWUszSuASZPzPNMicpu2ceBE8MuArGMpY+i7QqBvfL4w2spMoxsk+BjDvA GZUYz6uwrygho83r+KT/HQiwpVR9gh9COjY/BNovgzNUUeMaQtAo1k926eTQdKqYUIa8K1zC1OPg 2lnOYfaPN5hTz+3GU4APhRGfmlNAhhLiE7uw8CD23JhAhaU9L90lXQ7QCwu0orZVwtQoJU0Mh4Qi viDaFFJe0ilP2ZMQkkbFn3PyGFAfZT6JqOdufzRBZThaVcnES5LfmVzyOIQBHNzwlNLzHUfRyta2 asQENaCA89xK17pShAayopVd98rXhcTKehHbEvEOJkqo7tWw5qykZprJNRe4YAPXMwn3SiUAVyqn leWSJb4qG7CMVJNX1+yWMpkps3E+smemQSdoY2QoO+0yeK790+Q06y/O/ybFtBUKAAcyqlnc5rZk x9ptZxUSTFWp6yaUtWxwhXlcxZgyYeiT7Fk9CkFhwdN9h5npnNbExWyOi38H9Sk9HbIoEWlRQAVF b+jmSV0yUueI7M1hObVIryWNs1EWhC8tqfpchEWXLYGBW9lEekPtVsSoDript5SaJqZaZao9vGoL cYqylaq0dgQ2HHEhPEUIZrh/Qd1OSY7okJjylHVl0yJindu1QfZ1ITvc4YtPyDQ/zvjGaK0xjnfc VhI2jcdALqSO08QnUBqSsYLpb70wU9j+YmbJMwbidVEDMl4JFz265a2rfFtfacWWl94lTpaHu6Ex m0lMM+HyfGW23HYVt7O7n3Uha5Mppm1GrJtrOm1Cznk/2rJWJep5MwGa6608/3FXnmuoFvkXXzda N4nqDeB+dULft+iXu1qpKP7oC1CIKPqI4R1jDMurlCnbcrqsjNykx7vHIRt2KgZA8BcLKsUPg4gl 3b01SI+y0hXTeqYqZp1ThYpF7pAYRCFmiKyRmlPe7LTBGRx2QyT8Uc29WgJSTbavQZxrOxYMVzIO srgjc8dxmzuP5T63ulOY7nW7m4MBAQA7 --0__=0ABBF700DFFA70EB8f9e8a93df938690918c0ABBF700DFFA70EB-- --===============2339735627999006552== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============2339735627999006552==-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: How to make audit available Date: Mon, 17 Nov 2014 14:41:17 -0500 Message-ID: <1553624.KOTK9mlvOE@x2> References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Monday, November 17, 2014 02:21:22 PM Gisela Cheng wrote: > I am running 'Linux zp93k1 3.10.0-123.e17.6.s390x .... When I check > audit status: > > So audit function is missing from the kernel. How do I make it > available? I think you'll need to file a bug report and ask for auditing to be enabled. -Steve