Audit Daemon in RH 7.3

oulevon · 08-05-2002, 10:27 PM

I'm attempting to install snare, and all went well, but it says that the audit daemon is not active or unable to open /proc/auditinfo

Does anyone know how to get that daemon going? I did a custom install and only installed the necessities, and shut off all unnecessary services. Thanks for your help.

unSpawn · 08-06-2002, 07:20 AM

Did you install the LKM? Watch your options as well
Did you start auditd? Cuz installing tru rpm needs you to manually start it.
Conf good? Logs set up?
Anything in (dmesg|messages|audit log)?