Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 07 Dec 2007 15:06:07 -0600
From:      Paul Schmehl <pauls@utdallas.edu>
To:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Problems with auditd
Message-ID:  <1DD9ABE123D4CF6F937ADD62@utd59514.utdallas.edu>

next in thread | raw e-mail | index | archive | help
I upgraded my system from 6.0 RELEASE to 6.2 RELEASE by cvsupping the files 
and then running buildkernel/buildworld as usual.  Since doing that, auditd 
will not run, even though I have auditd_enable="YES" in /etc/rc.conf. I've 
been reading online posts about auditd and auditing (as well as the man 
pages) but I haven't found what the problem is.

If I run audit -s, I get this:
root@utd59514# audit -s
Error sending trigger: Function not implemented

Any idea what the problem might be?  I *thought* I had the latest sources. 
I have since cvsupped a second time and rebuilt world, but I have not 
rebuilt the kernel.

-- 
Paul Schmehl (pauls@utdallas.edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/ir/security/




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1DD9ABE123D4CF6F937ADD62>