Unable to start audit daemon
Issue
-
Unable to start the audit daemon with the following errors in
/var/log/messages
auditd[20989]: Error - audit support not in kernel auditd[20989]: Cannot open netlink audit socket auditd[20989]: The audit daemon is exiting.
Environment
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.