How are you restarting auditd and what's the purpose? Those logs are OK if you kill auditd, however when it starts back up it should start getting the logs.
What code base version our you on, google merged the auditd functionality into something called logd. Bill On Oct 15, 2014 11:21 PM, "Pankaj Kushwaha" <[email protected]> wrote: > Hi, > > I took auditd mechanism from bit-bucket to collect seandroid denials in > audit.log file. > Recently I observed that whenever I restart auditd, sometimes it stops > logging new audit logs. > > I am seeing below error in dmesg- > <3>[ 3130.027258] audit: *NO* daemon at audit_pid=4733 > <4>[ 3130.032157] audit: audit_lost=2 audit_rate_limit=0 > audit_backlog_limit=64 > <3>[ 3130.038063] audit: auditd disappeared > > Is it known issue and do we have any fix for this ? > > I tried to google about it and saw that someone else was facing the same > problem (though no on Andorid)- > https://www.redhat.com/archives/linux-audit/2011-September/msg00010.html > > Thanks > Pankaj Kushwaha > > _______________________________________________ > Seandroid-list mailing list > [email protected] > To unsubscribe, send email to [email protected]. > To get help, send an email containing "help" to > [email protected]. >
_______________________________________________ Seandroid-list mailing list [email protected] To unsubscribe, send email to [email protected]. To get help, send an email containing "help" to [email protected].
