/etc/audit.rules

Linux_Learner[LL] · 07-15-2006, 02:40 PM

OS: rhel 4

I simply add the following line in /etc/audit.rules

-w /etc/hosts -p wa -k CFG_hosts
#service auditd start [ok]
Error sending watch insert request (Invalid argument)
There was an error in line 15 of /etc/audit.rules

why I m getting the above error
Plz help

Matir · 07-15-2006, 11:10 PM

Moved: This thread is more suitable in Linux - Security and has been moved accordingly to help your thread/question get the exposure it deserves.

Linux_Learner[LL] · 07-16-2006, 07:19 AM

well this error has gone by simply upgrading the kernel from 2.6.9-5.EL to 2.6.9-22.EL
isint a bug in 2.6.9-5.EL ?
Thanks