Find the answer to your Linux question:
Results 1 to 2 of 2
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1

    getting error when restarting auditd on SLES 10 box

    anyone know if there is a bug with auditd on this version of SLES. I wanted to put in the parameter:

    name_format = hostname

    but if I add that to the auditd.conf file and then restart it gives me:

    auditd startproc: exit status of parent of /sbin/auditd: 6

    I'm not sure if this is a known issue but when trying it on any other box it's fine and accepts that parameter. Anyone know how to get around this?

  2. #2
    Okay, I guess this version of auditd on this version of SLES does not accept that parameter in the auditd.conf file. I looked at my SLES 11 box and it has the normal parameters and can use that. All I'm trying to do is have the information that is eventually pouring into the syslog have the hostname or fqdn instead of an IP. Does anyone know how to do that so you won't see the IP and just the hostname?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts