[BlueOnyx:01378] Re: Audit service stopped

[George Grigore]

Hello Michael,

When I've tried to run
/usr/sbin/swatch -C /etc/swatch.conf
it seemed that there was no swatch in /usr/sbin. It was located in
/usr/bin only. Then, I have remembered that when I have changed the
repos to rpmforge few weeks ago, swatch got automatically updated with
a rpmforge version (so did phpmyadmin, as you showed me how to change
it back about 2 weeks ago).
Now, I have just reinstalled swatch from blueonyx repos and it works
like a charm again!

Thanks a lot!
George

2009/6/10 Michael Stauber <mstauber at blueonyx.it>
>
> Hi George,
>
> > I am having a problem, recently. The active monitor in the control panel
> > doesen't seem to work anymore. Only the ftp service seems to be watched,
> > having the only green light before it's name (all others are grey), even
> > though all the other services are enabled in the settings.
> > I have found this in the daily logwatch mail, received 3 days ago:
> >  --------------------- Selinux Audit Begin ------------------------
> >
> >  Number of audit daemon stops: 1
> >
> >  ---------------------- Selinux Audit End -------------------------
> > That was the last logwatch I have with detailed data. Now, I only get
> > reports about httpd errors and disk space.
> > I had a problem few days ago, posted here, too, solved now, in which
> > phpmyadmin got updated with a wrong package from rpmforge. I am wondering
> > if it has any link.
> > What could it be?
>
> Try the following through SSH as "root":
>
> /etc/init.d/syslog restart
> /etc/init.d/crond restart
> /etc/init.d/cced.init restart
> /usr/sbin/swatch -C /etc/swatch.conf
>
> Not all of these commands may be needed, but please use all of them for good
> measure. It restarts the Syslog daemon, Crond, cced.init and finally runs the
> "Active Monitor" script to update the status of the monitored services.
>
> > I must mention that I have rebooted the machine once for other reasons,
> > and it's still not working
>
> Well, a reboot should have taken care of this, too. Weird that it didn't sort
> you out.
>
> --
> With best regards
>
> Michael Stauber
>
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at blueonyx.it
> http://www.blueonyx.it/mailman/listinfo/blueonyx