Problems with auditd

Cristiano Deana cristiano.deana at gmail.com
Wed Sep 6 00:38:58 PDT 2006


Hi,

i updated my system to -STABLE (FreeBSD mobile.deana.it 6.1-STABLE
FreeBSD 6.1-STABLE #10: Wed Sep  6 08:20:43 CEST 2006) and followed
instructions at
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/audit.html

but when i tried to start auditd i got:

# grep auditd /etc/rc.conf
auditd_enable="YES"
# /etc/rc.d/auditd start
Starting auditd.
# tail -6 /var/log/messages
Sep  6 09:34:29 mobile auditd[3867]: auditctl failed setting log file!
: Invalid argument
Sep  6 09:34:29 mobile auditd[3867]: Log directories exhausted
Sep  6 09:34:29 mobile auditd[3867]: Could not swap audit file
Sep  6 09:34:29 mobile auditd[3867]: Error reading control file
Sep  6 09:34:29 mobile cris: audit warning: getacdir /var/audit
Sep  6 09:34:29 mobile cris: audit warning: nostart

files in /etc/security has not been modified.

where i'm wrong?

thanks in advance.

-- 
Cris, member of G.U.F.I
Italian FreeBSD User Group
http://www.gufi.org/


More information about the freebsd-stable mailing list