无法在 Ubuntu 14.04 中启动 auditctl

无法在 Ubuntu 14.04 中启动 auditctl

当我尝试在我的终端(vds 容器 ubuntu 14.04)中启动 auditctl 时,我收到以下消息:

The audit system is disabled

审计日志:

type=DAEMON_START msg=audit(1453274392.823:9236): auditd start, ver=2.3.2 format=raw kernel=2.6.32 auid=0 pid=2367 res=success
type=DAEMON_ABORT msg=audit(1453274392.825:9237): auditd error halt, auid=0 pid=2367 res=failed

系统日志:

Jan 20 02:01:00 vm16590 auditd[3512]: Started dispatcher: /sbin/audispd pid: 3514
Jan 20 02:01:00 vm16590 audispd: priority_boost_parser called with: 4
Jan 20 02:01:00 vm16590 audispd: max_restarts_parser called with: 10
Jan 20 02:01:00 vm16590 audispd: No plugins found, exiting
Jan 20 02:01:00 vm16590 auditd[3512]: Unable to set initial audit startup state to 'enable', exiting
Jan 20 02:01:00 vm16590 auditd: Cannot daemonize (Success)
Jan 20 02:01:00 vm16590 auditd: The audit daemon is exiting.
Jan 20 02:01:00 vm16590 auditd[3512]: The audit daemon is exiting.

我怎样才能开始呢?

更新

如果是真的在容器内部使用审计是不可能的。

相关内容