Date: Wed, 6 Sep 2006 09:37:23 +0200 From: "Cristiano Deana" <cristiano.deana@gmail.com> To: "FreeBSD Stable Mailing List" <freebsd-stable@freebsd.org> Subject: Problems with auditd Message-ID: <d8a4930a0609060037i11b9a5d7r34f8cac4a9bf40df@mail.gmail.com>
next in thread | raw e-mail | index | archive | help
Hi, i updated my system to -STABLE (FreeBSD mobile.deana.it 6.1-STABLE FreeBSD 6.1-STABLE #10: Wed Sep 6 08:20:43 CEST 2006) and followed instructions at http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/audit.html but when i tried to start auditd i got: # grep auditd /etc/rc.conf auditd_enable="YES" # /etc/rc.d/auditd start Starting auditd. # tail -6 /var/log/messages Sep 6 09:34:29 mobile auditd[3867]: auditctl failed setting log file! : Invalid argument Sep 6 09:34:29 mobile auditd[3867]: Log directories exhausted Sep 6 09:34:29 mobile auditd[3867]: Could not swap audit file Sep 6 09:34:29 mobile auditd[3867]: Error reading control file Sep 6 09:34:29 mobile cris: audit warning: getacdir /var/audit Sep 6 09:34:29 mobile cris: audit warning: nostart files in /etc/security has not been modified. where i'm wrong? thanks in advance. -- Cris, member of G.U.F.I Italian FreeBSD User Group http://www.gufi.org/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?d8a4930a0609060037i11b9a5d7r34f8cac4a9bf40df>