Traces is restarting auditd with the wrong command

Support
#1

Noticed traces tries to restart auditd with the command “sudo systemctl restart auditd”

image
image1134×393 66.4 KB

However auditd should be restarted with “sudo service auditd restart” according to:

Tested this on my EL 7/8/9 hosts and is correct. Can this be fixed?

#2

To my knowledge, tracer is not part of Foreman/Katello, but simply an integrated piece of software.
I suggest you report that bug at their github. :slight_smile:

#3

Aha, did now know that, have opened an issue in github.

#4

A workaround command to run with REX until tracer is fixed:

tracer -a | grep -q auditd && service auditd restart
1 Like
#5

So seems fix is now added to new release.

So I guess it is now just a waiting game for it to be added to the current release of you favorite EL distribution.

1 Like