The kernel config should have the CONFIG_AUDITSYSCALL option set (see https://www.redhat.com/archives/linux-audit/2008-January/msg00015.html).
The kernel config should have the CONFIG_AUDITSYSCALL option set (see https:/ /www.redhat. com/archives/ linux-audit/ 2008-January/ msg00015. html).