audit 1.2.2 released

Steve Grubb sgrubb at redhat.com
Mon May 15 20:04:51 UTC 2006


On Monday 15 May 2006 15:57, Michael C Thompson wrote:
> auditctl is still reporting the "error sending rule" problem. Here are
> my auditctl and kernel versions:
>
> auditctl version 1.2.2
> 2.6.16-1.2200.2.2_FC6.lspp.25
>
> # auditctl -l
> Error sending rule list request (Operation not permitted)

This is not the error sending rule problem. This looks like a permission 
problem. What selinux policy and role are you doing this from? Are there any  
relevant AVCs in the audit logs from this time?

-Steve




More information about the Linux-audit mailing list