Arch Linux

thorko

Member

Registered: 2024-09-05

Posts: 2

auditd Error sending add rule data request (Invalid argument)

When calling auditctl I'll get the following error

auditctl -a never,exclude -F exe=/usr/bin/sudo
Error sending add rule data request (Invalid argument)
There was an error while processing parameters

Kernel is

uname -a
Linux thorstenm-xm2305 6.10.7-arch1-1 #1 SMP PREEMPT_DYNAMIC Thu, 29 Aug 2024 16:48:57 +0000 x86_64 GNU/Linux

I want to filter the audit messages from some procs

gromit

Package Maintainer (PM)

From: Germany

Registered: 2024-02-10

Posts: 846

Website

Re: auditd Error sending add rule data request (Invalid argument)

Is it fixed when you update to version 4.0.2-2? This was already reported and fixed I think https://gitlab.archlinux.org/archlinux/ … -/issues/2

thorko

Member

Registered: 2024-09-05

Posts: 2

Re: auditd Error sending add rule data request (Invalid argument)

yes works, thanks a lot