auid unset

Steve Grubb sgrubb at redhat.com
Thu Dec 6 22:25:13 UTC 2007


On Thursday 06 December 2007 02:42:30 pm Kirkwood, David A. wrote:
> The ausearch -m DAEMON_START returns version 1.0.14 for auditd on both
> systems. I grepped for loginuid.so in the pam.d directory and it appears in
> all of the same pam entries on both systems. No luck yet, however I
> appreciate your help.

Do you have audit=1 as kernel boot option?

-Steve




More information about the Linux-audit mailing list