Unable to start audit daemon
Issue
Unable to start the audit daemon with the following errors in /var/log/messages
auditd[20989]: Error - audit support not in kernel
auditd[20989]: Cannot open netlink audit socket
auditd[20989]: The audit daemon is exiting.
Environment
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.