audit.19 kernel

Steve Grubb sgrubb at redhat.com
Thu Apr 7 21:46:15 UTC 2005


On Thursday 07 April 2005 16:56, David Woodhouse wrote:
> > I don't see any messages from the kernel saying a signal was being sent
> > to the audit daemon. Can you double check it? If you generate a new
> > kernel, can you include the backlog patch from yesterday?
>
> fish /fish/pkgs/openoffice.org/devel # tail -2 /var/log/audit.log
> type=DAEMON msg=auditd(1112872753) auditd normal halt, pid=10941, uid=0
> type=KERNEL msg=audit(1112872753.335:0): attempt to signal audit daemon:
> error=0 signal=15 pid=10956 auid=-1

I'm not seeing the above message and I'm running your latest 686 kernel. Can 
anyone else confirm seeing the message and what rpm arch they are using?

-Steve




More information about the Linux-audit mailing list