Problems with auditd
Cristiano Deana
cristiano.deana at gmail.com
Wed Sep 6 00:38:58 PDT 2006
Hi,
i updated my system to -STABLE (FreeBSD mobile.deana.it 6.1-STABLE
FreeBSD 6.1-STABLE #10: Wed Sep 6 08:20:43 CEST 2006) and followed
instructions at
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/audit.html
but when i tried to start auditd i got:
# grep auditd /etc/rc.conf
auditd_enable="YES"
# /etc/rc.d/auditd start
Starting auditd.
# tail -6 /var/log/messages
Sep 6 09:34:29 mobile auditd[3867]: auditctl failed setting log file!
: Invalid argument
Sep 6 09:34:29 mobile auditd[3867]: Log directories exhausted
Sep 6 09:34:29 mobile auditd[3867]: Could not swap audit file
Sep 6 09:34:29 mobile auditd[3867]: Error reading control file
Sep 6 09:34:29 mobile cris: audit warning: getacdir /var/audit
Sep 6 09:34:29 mobile cris: audit warning: nostart
files in /etc/security has not been modified.
where i'm wrong?
thanks in advance.
--
Cris, member of G.U.F.I
Italian FreeBSD User Group
http://www.gufi.org/
More information about the freebsd-stable
mailing list