Issues installing auditd on Ubuntu 16.04

I'm having issues installing auditd on Ubuntu 16.04.  Below is what I get.. Any ideas?

After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n] y
Setting up auditd (1:2.4.5-1ubuntu2.1) ...
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
Job for auditd.service failed because the control process exited with error code. See "systemctl status auditd.service" and "journalctl -xe" for details.
invoke-rc.d: initscript auditd, action "start" failed.
● auditd.service - Security Auditing Service
   Loaded: loaded (/lib/systemd/system/auditd.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Wed 2018-03-07 16:24:26 UTC; 5ms ago
  Process: 3196 ExecStartPost=/sbin/auditctl -R /etc/audit/audit.rules (code=exited, status=0/SUCCESS)
  Process: 3195 ExecStart=/sbin/auditd -n (code=exited, status=1/FAILURE)
 Main PID: 3195 (code=exited, status=1/FAILURE)

Mar 07 16:24:26 support systemd[1]: Starting Security Auditing Service...
Mar 07 16:24:26 support systemd[1]: auditd.service: Main process exited, code=exited, status=1/FAILURE
Mar 07 16:24:26 support systemd[1]: Failed to start Security Auditing Service.
Mar 07 16:24:26 support systemd[1]: auditd.service: Unit entered failed state.
Mar 07 16:24:26 support systemd[1]: auditd.service: Failed with result 'exit-code'.
dpkg: error processing package auditd (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 auditd
E: Sub-process /usr/bin/dpkg returned an error code (1)
gopher_49Asked:
Who is Participating?
 
Prabhin MPConnect With a Mentor Engineer-TechOPSCommented:
hi,
Can you remove the full package  and reinstall . The package is not fully installed.

use apt-get remove --purge packagename*
0
 
dfkeConnect With a Mentor Commented:
hi,

If audit.log file is world-readable (ie. 644), then auditd won't start.

Cheers
0
 
dfkeCommented:
Hi,

Both comments should help solve this issue.

Cheers
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.