Re: Running auditd from Raspberry Pi (Raspbian)

2015-10-26 Thread Kangkook Jee
This time, I built with —with-arm option and tried again. It still fails but with different error message. pi@raspberrypi ~/audit-2.4.4 $ grep arm config.status ac_cs_config="'--with-arm'" set X /bin/bash './configure' '--with-arm' $ac_configure_extra_args --no-create --no-recursion

Re: Running auditd from Raspberry Pi (Raspbian)

2015-10-26 Thread Kangkook Jee
Dear Steve, I built auditctl from recent audit source and tried it again but I failed with the following errors. pi@raspberrypi ~/audit-2.4.4 $ sudo auditctl -e1 -b 102400 AUDIT_STATUS: enabled=1 flag=1 pid=2022 rate_limit=0 backlog_limit=320 lost=0 backlog=0 (reverse-i-search)`b': sudo

Re: Running auditd from Raspberry Pi (Raspbian)

2015-10-26 Thread Steve Grubb
On Monday, October 26, 2015 04:25:57 PM Kangkook Jee wrote: > Dear Steve, > > I built auditctl from recent audit source and tried it again but I failed > with the following errors. > > pi@raspberrypi ~/audit-2.4.4 $ sudo auditctl -e1 -b 102400 > AUDIT_STATUS: enabled=1 flag=1 pid=2022

Re: Running auditd from Raspberry Pi (Raspbian)

2015-10-26 Thread Kangkook Jee
I added “—with-armeb” should it be just “—with-arm” ? This following shows my configuration status. pi@raspberrypi ~/audit-2.4.4 $ grep arm config.status ac_cs_config="'--with-armeb'" set X /bin/bash './configure' '--with-armeb' $ac_configure_extra_args --no-create --no-recursion

Re: Running auditd from Raspberry Pi (Raspbian)

2015-10-26 Thread Steve Grubb
On Monday, October 26, 2015 05:18:12 PM Kangkook Jee wrote: > This time, I built with —with-arm option and tried again. It still fails but > with different error message. > > > pi@raspberrypi ~/audit-2.4.4 $ grep arm config.status > ac_cs_config="'--with-arm'" > set X /bin/bash './configure'

Re: Running auditd from Raspberry Pi (Raspbian)

2015-10-26 Thread Steve Grubb
On Friday, October 23, 2015 07:16:40 PM Kangkook Jee wrote: > Hi, all > > From my Raspberry Pi machine (running Debian Wheezy distribution), I could > see the kernel is built with audit enabled, and I could manage to install > user-space audit client with the following command. > >

Re: Running auditd from Raspberry Pi (Raspbian)

2015-10-26 Thread Kangkook Jee
Thanks a lot for your support. I will try with newer version and let you know how it goes! Regards, Kangkook > On Oct 26, 2015, at 11:55 AM, Steve Grubb wrote: > > On Friday, October 23, 2015 07:16:40 PM Kangkook Jee wrote: >> Hi, all >> >> From my Raspberry Pi machine

Running auditd from Raspberry Pi (Raspbian)

2015-10-23 Thread Kangkook Jee
Hi, all From my Raspberry Pi machine (running Debian Wheezy distribution), I could see the kernel is built with audit enabled, and I could manage to install user-space audit client with the following command. pi@raspberrypi ~ $ sudo apt-get install auditd However, when I tried to enable