Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 352239 - sys-process/audit should check if the CONFIG_AUDIT kernel option is set
Summary: sys-process/audit should check if the CONFIG_AUDIT kernel option is set
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High enhancement (vote)
Assignee: Robin Johnson
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-01-20 13:59 UTC by Dean Matzkov
Modified: 2011-01-25 03:34 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dean Matzkov 2011-01-20 13:59:23 UTC
The auditd daemon errors-outs if the CONFIG_AUDIT kernel option isn't set, so there should be a check for it in its ebuild.

The CONFIG_AUDITSYSCALL option might need to be set too, but I'm not sure.

Here's what auditd said to the system log without those kernel options enabled:

auditd: Error - audit support not in kernel
auditd: Cannot open netlink audit socket
auditd: The audit daemon is exiting.
auditd: Cannot daemonize (Success)
auditd: The audit daemon is exiting.
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2011-01-25 03:34:55 UTC
Implemented in 2.0.5.