search

scaleway / kernel-tools

:penguin: Kernels on Scaleway
http://devhub.scaleway.com/#/bootscripts
MIT License
103 stars 36 forks source link

audit support #290

Closed cjktan closed 8 years ago

cjktan commented 8 years ago

It looks like the kernel does not have 'audit' support loaded:

-- Unit auditd.service has begun starting up.
Jun 28 10:08:58 scw-pltest1 auditd[31609]: Error - audit support not in kernel
Jun 28 10:08:58 scw-pltest1 auditd[31609]: Cannot open netlink audit socket
Jun 28 10:08:58 scw-pltest1 auditd[31609]: The audit daemon is exiting.
Jun 28 10:08:58 scw-pltest1 systemd[1]: auditd.service: main process exited, code=exited, status=1/FAILURE
Jun 28 10:08:58 scw-pltest1 augenrules[31610]: /sbin/augenrules: No change
Jun 28 10:08:58 scw-pltest1 augenrules[31610]: Error - audit support not in kernel
Jun 28 10:08:58 scw-pltest1 augenrules[31610]: Error - audit support not in kernel
Jun 28 10:08:58 scw-pltest1 augenrules[31610]: Cannot open netlink audit socket
Jun 28 10:08:58 scw-pltest1 systemd[1]: Failed to start Security Auditing Service.
-- Subject: Unit auditd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit auditd.service has failed.

This is standard in CentOS. Can you please help enable it? The cause appears to be here:

https://github.com/scaleway/kernel-tools/blob/master/tools/configs/x86_64-mainline.conf#L30

Thanks!

QuentinPerez commented 8 years ago

Hi @cjktan, thank you for your feedback

I released the kernel x86_64 std #2 with the AUDIT support, can you change your bootscript and reboot ?