"Error sending add rule request" using 1.5.4

[Steve Grubb]

On Wednesday 09 January 2008 14:37:29 Mathias Gug wrote:
> On Wed, Jan 09, 2008 at 02:13:57PM -0500, Steve Grubb wrote:
> > On Wednesday 09 January 2008 14:01:39 Brennan, William C wrote:
> > I'd start with asking if the kernel supports auditing. Auditctl has no
> > dependencies on anything in userspace aside from a normal glibc.
>
> The kernel configuration is the following:
>
> ~$ grep -i audit /boot/config-2.6.22-14-generic
> CONFIG_AUDIT=y
> # CONFIG_AUDITSYSCALL is not set

^^^^^^^ Set this

> CONFIG_AUDIT_ARCH=y
>
> Is there another option that should be set ?

-Steve