diff -urp audit-3.0.orig/src/auditd.c audit-3.0/src/auditd.c --- audit-3.0.orig/src/auditd.c 2018-08-31 17:05:48.000000000 -0400 +++ audit-3.0/src/auditd.c 2018-12-06 19:41:21.076570614 -0500 @@ -665,7 +665,7 @@ int main(int argc, char *argv[]) #ifndef DEBUG /* Make sure we can do our job. Containers may not give you * capabilities, so we revert to a uid check for that case. */ - if (!audit_can_control() || !audit_can_read()) { + if (!audit_can_control()) { if (!config.local_events && geteuid() == 0) ; else {