Public bug reported: $ sudo /etc/init.d/auditd restart * Restarting audit daemon auditd Error sending add rule data request (Invalid argument) There was an error in line 17 of /etc/audit/audit.rules [ OK ]
The non-comment lines before this were: -D -b 328 -w /etc/localtime -p wa -k time-change ... The watch rule on /etc/localtime is the first 'real' rule and it caused the error. The default rules file does almost nothing but seems to work okay. I'm guessing this is in part due to being on an armhf (armv7l) system. Thanks ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: auditd 1.7.18-1ubuntu1 ProcVersionSignature: Ubuntu 3.2.0-1497.124-omap4 3.2.79 Uname: Linux 3.2.0-1497-omap4 armv7l ApportVersion: 2.0.1-0ubuntu17.15 Architecture: armhf Date: Wed Mar 29 12:20:43 2017 MarkForUpload: True ProcEnviron: TERM=rxvt-unicode PATH=(custom, no user) LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: audit UpgradeStatus: No upgrade log present (probably fresh install) modified.conffile..etc.audit.audit.rules: [modified] mtime.conffile..etc.audit.audit.rules: 2017-03-29T12:19:33.699968 ** Affects: audit (Ubuntu) Importance: Undecided Status: New ** Tags: apport-bug armhf precise -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1677363 Title: does auditd work on armhf on precise? To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/audit/+bug/1677363/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs