audit.47

[David Woodhouse]

On Sat, 2005-05-21 at 19:53 -0400, Rob Myers wrote:
> On Sun, 2005-05-22 at 00:20 +0100, David Woodhouse wrote:
> > On Sat, 2005-05-21 at 19:06 -0400, Rob Myers wrote:
> > > i attempted to send this to linux-audit but it appears to be caught by
> > > the moderator...
> > 
> > Hm. I don't moderate that list so I can't see why. What did the message
> > say was the reason?
> 
> because i'm not subscribed to the list.  its only been a couple of days,
> but the moderator hasn't let me subscibe yet.

Hmm. I'm not sure who does moderate it. I'll investigate; perhaps I
should take over that task.

> > > like audit.45, audit.47 also says "VFS: Busy inodes after unmount.
> > > Self-destruct in 5 seconds.  Have a nice day..." during shutdown.
> > 
> > Does this happen only after you've set filesystem watches?
> 
> after some testing watches in general appear to be fine.  i only get the
> message if i set a watch on /var/log/audit like so:
> 
> auditctl -w /var/log/audit -k fk_var_log_audit -prwea

OK, thanks. This message is Cc'd to the list so that the IBM developer
who is working on that can see it.

-- 
dwmw2