Possible SELinux or audit problem
David Fernandez
dfernandez at cct.co.uk
Thu Nov 3 15:03:42 UTC 2005
Hi there,
Since applying the last updates to FC4 from fedora site, it seems that
most of the audit messages have disappeared. However, I still get the
following when shutting down my system:
Nov 2 11:11:23 software auditd[1752]: The audit daemon is exiting.
Nov 2 11:11:23 software kernel: audit(1130929883.927:113): audit_pid=0
old=1752 by auid=4294967295
Nov 2 11:11:24 software kernel: audit(1130929884.067:114): SELinux:
unrecognized netlink message type=1009 for sclass=49
Nov 2 11:11:24 software kernel:
Nov 2 11:11:24 software kernel: audit(1130929884.067:114):
arch=40000003 syscall=102 success=no exit=-22 a0=b a1=bfa5f5b0
a2=80510f8 a3=bfa659d8 items=0 pid=3060 auid=4294967295 uid=0 gid=0
euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm="auditctl"
exe="/sbin/auditctl"
Nov 2 11:11:24 software kernel: audit(1130929884.067:114):
saddr=100000000000000000000000
Nov 2 11:11:24 software kernel: audit(1130929884.067:114): nargs=6 a0=3
a1=bfa6383c a2=10 a3=0 a4=bfa659d8 a5=c
Nov 2 11:11:24 software kernel: audit(1130929884.167:115): SELinux:
unrecognized netlink message type=1009 for sclass=49
Nov 2 11:11:24 software kernel:
Nov 2 11:11:24 software kernel: audit(1130929884.167:115):
arch=40000003 syscall=102 success=no exit=-22 a0=b a1=bfa5f5a0
a2=80510f8 a3=bfa659c8 items=0 pid=3060 auid=4294967295 uid=0 gid=0
euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm="auditctl"
exe="/sbin/auditctl"
Nov 2 11:11:24 software kernel: audit(1130929884.167:115):
saddr=100000000000000000000000
Nov 2 11:11:24 software kernel: audit(1130929884.167:115): nargs=6 a0=3
a1=bfa6382c a2=10 a3=0 a4=bfa659c8 a5=c
Some ideas about how to resolve those?
David.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20051103/16bbb6b8/attachment-0001.htm>
More information about the fedora-list
mailing list