[Auditbeat] Unsupported syscalls: umount for x86_64

Elastic Stack Beats
1

When adding new syscalls to auditbeat on a RHEL 9.2 VM, I found that only umount2 is supported.

Errors:

umount
umount1200×222 19.8 KB

2

There is no umount syscall on x86_64 so that error is expected.

Linux x86_64 has umount2.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.