[prev in list] [next in list] [prev in thread] [next in thread] 

List:       linux-audit
Subject:    Re: auditd fails to start on FC6 system, newer kernels effect?
From:       Steve Grubb <sgrubb () redhat ! com>
Date:       2007-11-19 19:05:12
Message-ID: 200711191405.13273.sgrubb () redhat ! com
[Download RAW message or body]

On Monday 19 November 2007 01:23:25 pm Stephen Smalley wrote:
> > Connection refused sounds as if something else isn't running that should
> > be, but no direct clue, so what else needs to run too, before auditd?

Nothing else needs to be running. The audit daemon is one of the first user 
space daemons started by design.


> More of a question for linux-audit (cc'd).   Offhand, I'd guess that the
> ECONNREFUSED is coming from the netlink code, but I don't know why.

Right. It would be good to know if this was due to connect() failing. FWIW, I 
have not tested the audit system on 2.6.24 at all yet.

-Steve

[prev in list] [next in list] [prev in thread] [next in thread]