"protocol not supported" error when CONFIG_AUDIT is disabled #32
Labels
Comments
andrewkroh
added a commit
to andrewkroh/go-libaudit
that referenced
this issue
May 1, 2018
libaudit.NewAuditClient() returns EPROTONOSUPPORT (protocol not supported) if the kernel does not have audit supported compiled in (CONFIG_AUDIT=y). This change adds "audit not supported by kernel" to the error message when EINVAL, EPROTONOSUPPORT, or EAFNOSUPPORT are returned by the socket syscall. Fixes elastic#32
ruflin
pushed a commit
that referenced
this issue
May 3, 2018
libaudit.NewAuditClient() returns EPROTONOSUPPORT (protocol not supported) if the kernel does not have audit supported compiled in (CONFIG_AUDIT=y). This change adds "audit not supported by kernel" to the error message when EINVAL, EPROTONOSUPPORT, or EAFNOSUPPORT are returned by the socket syscall. Fixes #32
andrewkroh
added a commit
to andrewkroh/beats
that referenced
this issue
May 3, 2018
- Added better error messages for when the auditd module fails due to the Linux kernel not supporting auditing (CONFIG_AUDIT=n). elastic/go-libaudit#32
ph
pushed a commit
to elastic/beats
that referenced
this issue
May 3, 2018
- Added better error messages for when the auditd module fails due to the Linux kernel not supporting auditing (CONFIG_AUDIT=n). elastic/go-libaudit#32
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
libaudit.NewAuditClient()returnsEPROTONOSUPPORT(protocol not supported) if the kernel does not have audit supported compiled in (CONFIG_AUDIT=y). For example, CONFIG_AUDIT is disabled in the Arch Linux kernel packages so a custom kernel is required to use auditing, and anyone who tries to use this library will see "protocol not supported" errors.When creating the netlink audit socket we can wrap the
EPROTONOSUPPORTerror in a more informative message to help users.The text was updated successfully, but these errors were encountered: