Why auditd starts with message "The audit system is in immutable mode, no rules loaded"?
Issue
- Auditd is starting in immutable mode -
~]# service auditd restart
Stopping auditd: [OK]
Error deleting rule (Operation not permitted)
Starting auditd: [OK]
The audit system is in immutable mode, no rules loaded
Environment
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
- audit
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.