anyone know if there is a bug with auditd on this version of SLES. I wanted to put in the parameter:
name_format = hostname
but if I add that to the auditd.conf file and then restart it gives me:
auditd startproc: exit status of parent of /sbin/auditd: 6
I'm not sure if this is a known issue but when trying it on any other box it's fine and accepts that parameter. Anyone know how to get around this?