Possible SELinux or audit problem

David Fernandez dfernandez at cct.co.uk
Thu Nov 3 15:03:42 UTC 2005


	Hi there,

	Since applying the last updates to FC4 from fedora site, it seems that
most of the audit messages have disappeared. However, I still get the
following when shutting down my system:

Nov  2 11:11:23 software auditd[1752]: The audit daemon is exiting.
Nov  2 11:11:23 software kernel: audit(1130929883.927:113): audit_pid=0
old=1752 by auid=4294967295
Nov  2 11:11:24 software kernel: audit(1130929884.067:114): SELinux:
unrecognized netlink message type=1009 for sclass=49
Nov  2 11:11:24 software kernel: 
Nov  2 11:11:24 software kernel: audit(1130929884.067:114):
arch=40000003 syscall=102 success=no exit=-22 a0=b a1=bfa5f5b0
a2=80510f8 a3=bfa659d8 items=0 pid=3060 auid=4294967295 uid=0 gid=0
euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm="auditctl"
exe="/sbin/auditctl"
Nov  2 11:11:24 software kernel: audit(1130929884.067:114):
saddr=100000000000000000000000
Nov  2 11:11:24 software kernel: audit(1130929884.067:114): nargs=6 a0=3
a1=bfa6383c a2=10 a3=0 a4=bfa659d8 a5=c
Nov  2 11:11:24 software kernel: audit(1130929884.167:115): SELinux:
unrecognized netlink message type=1009 for sclass=49
Nov  2 11:11:24 software kernel: 
Nov  2 11:11:24 software kernel: audit(1130929884.167:115):
arch=40000003 syscall=102 success=no exit=-22 a0=b a1=bfa5f5a0
a2=80510f8 a3=bfa659c8 items=0 pid=3060 auid=4294967295 uid=0 gid=0
euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm="auditctl"
exe="/sbin/auditctl"
Nov  2 11:11:24 software kernel: audit(1130929884.167:115):
saddr=100000000000000000000000
Nov  2 11:11:24 software kernel: audit(1130929884.167:115): nargs=6 a0=3
a1=bfa6382c a2=10 a3=0 a4=bfa659c8 a5=c

	Some ideas about how to resolve those?

David.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20051103/16bbb6b8/attachment-0001.htm>


More information about the fedora-list mailing list