From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stephen Quinney Subject: Daemon start problems Date: Tue, 22 Nov 2011 10:52:32 +0000 Message-ID: <20111122105231.GC2547@kildalton> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from mx1.redhat.com (ext-mx11.extmail.prod.ext.phx2.redhat.com [10.5.110.16]) by int-mx09.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id pAMAqfc8027500 for ; Tue, 22 Nov 2011 05:52:41 -0500 Received: from nougat.ucs.ed.ac.uk (nougat.ucs.ed.ac.uk [129.215.13.205]) by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id pAMAqdSa030204 for ; Tue, 22 Nov 2011 05:52:40 -0500 Received: from dandy.inf.ed.ac.uk (dandy.inf.ed.ac.uk [129.215.33.80]) by nougat.ucs.ed.ac.uk (8.13.8/8.13.4) with ESMTP id pAMAqWks020874 for ; Tue, 22 Nov 2011 10:52:37 GMT Received: from localhost (cpc2-sgyl7-0-0-cust2044.sgyl.cable.virginmedia.com [82.41.55.253]) (authenticated bits=0) by dandy.inf.ed.ac.uk (8.13.8/8.13.8) with ESMTP id pAMAqWiY028012 for ; Tue, 22 Nov 2011 10:52:32 GMT Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com I'm seeing some problems with the audit daemon not starting at boot-time on a RHEL6 machine. If I login as root after the boot sequence has finished it can be manually started without any problems. At first I thought this might be a bad interaction with the readahead tool (as noted in the technical docs for RHEL6) so I removed that package entirely but the problem remains. We have a slightly peculiar environment due to the config management tool we use so I'm fairly confident this is our problem rather than a bug in the auditd code. However, I'm struggling to debug why it is failing each time. All I get back from the daemon is an exit code of 1, this seems to mean "generic or unspecified error", and no useful error messages so I'm a bit stuck on what to do next. Any suggestions? Stephen Quinney -- The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.