auditd and laus not working on Red Hat Enterprise V4

gizzy37 · 07-07-2005, 02:45 PM

I am having trouble starting up my auditd. I tried just running auditd but that didn't work. I've never used this before and feel a little bit lost. When i type /sbin/auditd it shows it assigning a process id and then... nothing. I did a ps aux | grep auditd | grep -v grep and what do you know? nothing shows up! I seem to be missing /etc/auditd.conf for some reason as well as /sbin/ausearch. I believe this is due to failing to install a package, but I can't find the rpm anywhere... Any help would be appreciated. Thanks.

gizzy37 · 07-08-2005, 12:15 PM

Ok, I got auditd to run, but my auditctl seems to have no effect on anything! I can't add rules, or watches, as a matter of fact, it doesn't have the -w option... I'm at my wits end with this... Any information would be helpful

pzero · 07-25-2005, 02:46 PM

I am having the same problem..... audit will not start. I get the Setting audit pid message and thats it. Can you tell me how you got it to work? Thanks in advance.....

Kyle