Find the answer to your Linux question:
Page 2 of 3 FirstFirst 1 2 3 LastLast
Results 11 to 20 of 23
So try: service auditd start But first open another terminal and do a tail -f /var/log/messages and then run the above command and see what the output is fromthe messages ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #11
    Linux User
    Join Date
    Aug 2006
    Location
    Croydon, PA
    Posts
    392

    So try:
    service auditd start

    But first open another terminal and do a tail -f /var/log/messages and then run the above command and see what the output is fromthe messages terminal.

  2. #12
    Just Joined!
    Join Date
    Jul 2006
    Location
    Kerala,India
    Posts
    31

    Result of service auditd start

    That produced this, which looks the same I earlier posted



    Aug 29 00:29:23 localhost kernel: audit(1156791563.845:7): avc: denied { read } for pid=2424 comm="auditd" name=audit dev=dm-0 ino=949262 scontext=root:syste m_r:auditd_t tcontext=system_u:object_r:var_log_t tclass=dir

    Aug 29 00:29:23 localhost auditd: Could not open dir /var/log/audit (Permission denied)

    Aug 29 00:29:23 localhost auditd: The audit daemon is exiting.

    Aug 29 00:29:24 localhost kernel: audit(1156791564.271:: audit_backlog_limit=2 56 old=256 by auid=4294967295



    Thank you very much for helping me.

  3. #13
    Just Joined!
    Join Date
    Jul 2006
    Location
    Kerala,India
    Posts
    31

    Permission denial

    I am wondering why the permission is denied. Or is that any other problem?

  4. $spacer_open
    $spacer_close
  5. #14
    Linux User
    Join Date
    Aug 2006
    Location
    Croydon, PA
    Posts
    392
    Quote Originally Posted by anoop_anooprs
    I am wondering why the permission is denied. Or is that any other problem?
    No this is problem.
    Is the directory /var/log/audit there?
    what are the permissions?
    Is the auditd.log file in there? and it's permissions.

  6. #15
    Banned CodeRoot's Avatar
    Join Date
    Sep 2005
    Posts
    567
    What is the output of:

    Code:
    ls -ld /var /var/log /var/log/audit
    EDIT: oops, sorry -- "audit", not "auditd"... (Thanks, Skiboy)

  7. #16
    Linux User
    Join Date
    Aug 2006
    Location
    Croydon, PA
    Posts
    392
    Quote Originally Posted by CodeRoot
    What is the output of:

    Code:
    ls -ld /var /var/log /var/log/auditd
    That last directory should be /var/log/audit and in there you should have auditd.log.

  8. #17
    Just Joined!
    Join Date
    Jul 2006
    Location
    Kerala,India
    Posts
    31

    audit is there

    The folder audit is there.
    It has permission 750, drwxr-x--x (may be wrong, correct value in next post. Must restart)
    The log file is not there, I will move it to there and set permissions as its parent dierectory

  9. #18
    Linux User
    Join Date
    Aug 2006
    Location
    Croydon, PA
    Posts
    392
    check the spelling, please.

    no need to restart the pc only try to restart the service.

  10. #19
    Banned CodeRoot's Avatar
    Join Date
    Sep 2005
    Posts
    567
    Quote Originally Posted by anoop_anooprs
    The folder audit is there.
    It has permission 750, drwxr-x--x (may be wrong, correct value in next post. Must restart)
    The log file is not there, I will move it to there and set permissions as its parent dierectory
    Somewhere in the distraction of my typo error, I believe the point was missed -- the permissions of '/var' and '/var/log' can [possibly] also affect... Check those permissions as well... (just in case)

    EDIT:
    Also - "just in case" - check ownership of all three...

    (The 'ls' command I suggested above would have made all of this known in one short operation.)

  11. #20
    Just Joined!
    Join Date
    Jul 2006
    Location
    Kerala,India
    Posts
    31

    Permissions of /var/log/audit & auditd.log

    /var/log/audit drwxr-x--
    /var/log/audit/auditd.log -rwxr-x--

    The owner of theses files is root


    I am currently using XP to connect to the net. I can't connect through FC4

Page 2 of 3 FirstFirst 1 2 3 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •