Home / server / Questions / 1073657
Accepted
McLayn
Asked: 2021-08-06 08:09:29 +0800 CST

CentOS doesn't boot with "A stop job is running for Security Auditing Service" message

  • 772

CentOS prints the following during boot

[ ***  ] A stop job is running for Security Auditing Service (9s / 1min 30s)

and then switches into the single user mode.

linux centos audit centos7 auditd

1 Answers

  1. Best Answer

    The problem was in /etc/audit/auditd.conf - see man 5 auditd.conf

    In the case of not enough memory (for audit logs), it was set to switch the server into the single user mode:

    space_left_action = SINGLE
admin_space_left_action = SINGLE

    The fix was to tweak the values of space_left and admin_space_left or to revert the original values of:

    space_left_action = SYSLOG
admin_space_left_action = SUSPEND
    • 2