Kernel audit subsystem fails to send data to process with error -111
Issue
-
auditd.service
is disabled, but kernel shows the following error message.Oct 08 11:21:55 localhost kernel: audit: netlink_unicast sending to audit_pid=28184 returned error: -111
Environment
- Red Hat Enterprise Linux 7
osqueryd
(3rd party application)
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.