Debian
audit package

  1. Bug #140784
  2. Comment #2

Comment 2 for bug 140784

Revision history for this message
Andrew Whyte (andrew-whyte) wrote : Re: auditctl: Error sending add rule data request (Invalid argument)

Same here:

$ sudo service auditd status
=> * auditd is running.

$ sudo auditctl -w /etc/passwd
=> Error sending add rule data request (Invalid argument)

Has anyone found a solution? Apparently auditing has moved into the kernel, but I can't see any evidence of this in Gutsy. As it is, the "auditd" package is pretty useless...