auditctl: Error sending add rule data request (Operation not supported) when applying audit rule
Issue
-
When trying to apply this rule:
auditctl -a exit,never -F arch=b64 -S adjtimex -F auid=unset -F uid=chrony -F subj_type=chronyd_t -
I got this error:
auditctl: Error sending add rule data request (Operation not supported)
Environment
- Red Hat Enterprise
- audit
- selinux
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
