Date: Mon, 23 Sep 2019 08:50:59 +0000 From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 240762] [auditdistd] cannot receive trail files from servers running auditd on FreeBSD12 Message-ID: <bug-240762-227@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D240762 Bug ID: 240762 Summary: [auditdistd] cannot receive trail files from servers running auditd on FreeBSD12 Product: Base System Version: 12.0-RELEASE Hardware: Any OS: Any Status: New Severity: Affects Some People Priority: --- Component: bin Assignee: bugs@FreeBSD.org Reporter: johan.sollvander@loopia.se After upgrading a server running auditd to FreeBSD12 (from FreeBSD 11.2) we noticed that trail files now have a dot (.) appended to the filename, which= our auditdistd receiver thinks is an invalid trail name. Logs from our receiver: (receiver) Sender wants to open file "20190920080142.20190920080929.", which has invalid name. (receiver) Request failed: (seq=3D3) OPEN(20190920080142.20190920080929.): invalid trail file name. (receiver) Sender requested append without first opening file. (receiver) Request failed: (seq=3D4) APPEND(2646): wrong operations order. (receiver) Sender requested closing file without first opening it. (receiver) Request failed: (seq=3D5) CLOSE(20190920080142.20190920080929.):= wrong operations order. (receiver) Unable to receive request header: Socket is not connected. Logs from our sender: (sender) Termination signal received, exiting. (sender) Receiver returned error (invalid trail file name), disconnecting. (sender) Disconnected from 172.22.239.16. I've tested upgrading the receiver to FreeBSD 12 as well but that doesn't s= eem to fix the issue. I also found this thread reporting the same issue: https://forums.freebsd.org/threads/auditd-on-freebsd-12-0-release-problem.6= 9686/ --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-240762-227>