解决审计服务auditd报错ExecStart=/sbin/auditd (code=exited, status=6)解决方法
1、查看systemctl status auditd状态启动失败
systemctl status auditd
具体查看auditd服务报错日志
journalctl -u auditd.service
这里报错/var/log/audit/audit.log is not owned by root
2、查看auditd日志属性权限
cd /var/log/audit/
ll
3、修改日志权限所有者
sudo chown root:root /var/log/audit/audit.log
查看文件权限
ll
重启服务
systemctl start auditd
查看服务
systemctl status auditd
