OpenVZ Forum: Support » Auditd in container doesn't work

Home » General » Support » Auditd in container doesn't work (On Debian 6 Container)

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Auditd in container doesn't work [message #43637]

Tue, 04 October 2011 09:17

dokuna
Messages: 7
Registered: July 2011
Location: Ukraine

Junior Member

Hi, i stcuk at starting up Auditd at Debian 6 OpenVZ container, with init.d starting script i have error:

Oct  4 12:57:42 vps07 auditd[3994]: Started dispatcher: /sbin/audispd pid: 3996
Oct  4 12:57:42 vps07 audispd: priority_boost_parser called with: 4
Oct  4 12:57:42 vps07 audispd: max_restarts_parser called with: 10
Oct  4 12:57:42 vps07 audispd: af_unix plugin initialized
Oct  4 12:57:42 vps07 audispd: audispd initialized with q_depth=80 and 1 active plugins
Oct  4 12:57:42 vps07 auditd[3994]: Unable to set audit pid, exiting
Oct  4 12:57:42 vps07 auditd[3994]: The audit daemon is exiting.
Oct  4 12:57:42 vps07 auditd: Cannot daemonize (Success)
Oct  4 12:57:42 vps07 auditd: The audit daemon is exiting.
Oct  4 12:57:52 vps07 audispd: priority_boost_parser called with: 4
Oct  4 12:57:52 vps07 audispd: max_restarts_parser called with: 10
Oct  4 12:57:52 vps07 audispd: af_unix plugin initialized
Oct  4 12:57:52 vps07 audispd: audispd initialized with q_depth=80 and 1 active plugins

Unable to set audit pid, hmm try to strace (see attach)