From mboxrd@z Thu Jan 1 00:00:00 1970 From: Amy Griffis Subject: Re: audit 1.2.2 released Date: Tue, 23 May 2006 02:56:08 -0400 Message-ID: <20060523065608.GA13276@zk3.dec.com> References: <200605121726.32952.sgrubb@redhat.com> <200605221331.54945.sgrubb@redhat.com> <4ae3c140605221215p3d5df960uf126265898c65698@mail.gmail.com> <200605221524.54439.sgrubb@redhat.com> <4ae3c140605221237r298563csb1ab233ef3fb0139@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Received: from mx3.redhat.com (mx3.redhat.com [172.16.48.32]) by int-mx1.corp.redhat.com (8.12.11.20060308/8.12.11) with ESMTP id k4MLorrn022224 for ; Mon, 22 May 2006 17:50:53 -0400 Received: from atlrel8.hp.com (atlrel8.hp.com [156.153.255.206]) by mx3.redhat.com (8.13.1/8.13.1) with ESMTP id k4MLogQR030602 for ; Mon, 22 May 2006 17:50:42 -0400 Content-Disposition: inline In-Reply-To: <4ae3c140605221237r298563csb1ab233ef3fb0139@mail.gmail.com> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Xin Zhao Cc: linux-audit@redhat.com List-Id: linux-audit@redhat.com On Mon, May 22, 2006 at 03:37:33PM -0400, Xin Zhao wrote: > I tried 1.0.14. It compiles without any problem. But after I ran > "./auditd", I got the following error messages in /var/log/messages: > > --------- ERROR MSGS ----------------------------------- > > May 22 15:35:03 shanghai auditd[16985]: Error sending failure mode > request (Connection refused) > May 22 15:35:03 shanghai auditd[16985]: Unable to set audit pid, exiting > May 22 15:35:03 shanghai auditd[16985]: The audit daemon is exiting. > May 22 15:35:03 shanghai auditd[16985]: Error sending failure mode > request (Connection refused) > May 22 15:35:03 shanghai auditd: Cannot daemonize (No child processes) > May 22 15:35:03 shanghai auditd: The audit daemon is exiting. > > > What's wrong with it? I am using FC4, but the kernel is 2.6.12 with xen > support. Have you built your kernel with CONFIG_AUDIT? > Thanks in advance! > > Xin