On Monday, October 26, 2015 04:25:57 PM Kangkook Jee wrote: > Dear Steve, > > I built auditctl from recent audit source and tried it again but I failed > with the following errors. > > pi@raspberrypi ~/audit-2.4.4 $ sudo auditctl -e1 -b 102400 > AUDIT_STATUS: enabled=1 flag=1 pid=2022 rate_limit=0 backlog_limit=320 > lost=0 backlog=0 (reverse-i-search)`b': sudo auditctl -e1 -^C102400 > pi@raspberrypi ~/audit-2.4.4 $ sudo src/auditctl -a exit,always -F > arch=armeb -S clone arch elf mapping not found > pi@raspberrypi ~/audit-2.4.4 $ sudo src/auditctl -a exit,always -S clone > Error detecting machine type > > Would you help me with this?
Did you add --with-arm to the ./configure line? Its disabled by default. -Steve -- Linux-audit mailing list Linux-audit@redhat.com https://www.redhat.com/mailman/listinfo/linux-audit
