A server stack is the collection of software that forms the operational infrastructure on a given machine. In a computing context, a stack is an ordered pile. A server stack is one type of solution stack — an ordered selection of software that makes it possible to complete a particular task. Like in this post about CentOS doesn’t boot with “A stop job is running for Security Auditing Service” message was one problem in server stack that need for a solution. Below are some tips in manage your linux server when you find problem about linux, centos, centos7, audit, auditd.
CentOS prints the following during boot
[ *** ] A stop job is running for Security Auditing Service (9s / 1min 30s)
and then switches into the single user mode.
The problem was in /etc/audit/auditd.conf – see man 5 auditd.conf
In the case of not enough memory (for audit logs), it was set to switch the server into the single user mode:
space_left_action = SINGLE
admin_space_left_action = SINGLE
The fix was to tweak the values of space_left and admin_space_left or to revert the original values of:
space_left_action = SYSLOG
admin_space_left_action = SUSPEND
