Error starting auditd

Wolff Felix (ETAS-SEC/ECT-Be) Felix.Wolff at escrypt.com
Thu May 16 10:47:05 UTC 2019


Hello,

I am currently porting auditd to a new platform. When starting it using `auditd -f`, I get the following error:

"Error setting audit daemon pid (File exists)"

It occurs during the call to `audit_set_pid(fd, getpid(), WAIT_YES);` in auditd.c. If I understand correctly, this call registers auditd with the kernel, is that correct? fd looks like a valid file descriptor, at least its >0. Especially the "file exists" part confuses me. In which direction can I investigate that error?

Thank you and greets,
Felix



--
Mit freundlichen Grüßen/Best regards
Felix Wolff
Software Engineer
[ESCRYPT-Logo_RGB]
ESCRYPT GmbH
Wittener Straße 45
44789 Bochum, Germany
Email:        felix.wolff at escrypt.com
Phone:      +49 30 403 691 957
Mobile:     +49 1525 6953 720
www.escrypt.com

Managing directors: Christopher White, Dr.-Ing. Thomas Wollinger
Registered office and court of registry: Bochum, Germany, HRB 7877

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20190516/3a590a24/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 6498 bytes
Desc: image003.png
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20190516/3a590a24/attachment.png>


More information about the Linux-audit mailing list