Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Jul 2020 19:13:56 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 248025] 'BSM conversion requested for unknown event 43115' generated by audit
Message-ID:  <bug-248025-227-j3GDqKzRmM@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-248025-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-248025-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | previous in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=248025

--- Comment #1 from James B. Byrne <byrnejb@harte-lyne.ca> ---
Seems to be related to audit itself somehow.

Jul 14 15:00:36 <security.notice> vhost04 auditd[880]: renamed
/var/audit/20200714190020.not_terminated. to
/var/audit/20200714190020.20200714190036.
Jul 14 15:00:36 <security.notice> vhost04 auditd[880]: New audit file is
/var/audit/20200714190036.not_terminated.
Jul 14 15:00:36 <security.warn> vhost04 root[15372]: audit warning: closefile
/var/audit/20200714190020.20200714190036.
Jul 14 15:00:36 <security.warn> vhost04 root[15373]: audit warning: expired
/var/audit/20200714185713.20200714185728.
Jul 14 15:00:41 <kern.crit> vhost04 kernel: BSM conversion requested for
unknown event 43115
Jul 14 15:01:06 <kern.crit> vhost04 syslogd: last message repeated 51 times
Jul 14 15:01:06 <security.notice> vhost04 auditd[880]: renamed
/var/audit/20200714190036.not_terminated. to
/var/audit/20200714190036.20200714190106.
Jul 14 15:01:06 <security.notice> vhost04 auditd[880]: New audit file is
/var/audit/20200714190106.not_terminated.
Jul 14 15:01:06 <security.warn> vhost04 root[20507]: audit warning: closefile
/var/audit/20200714190036.20200714190106.
Jul 14 15:01:06 <kern.crit> vhost04 kernel: BSM conversion requested for
unknown event 43115

-- 
You are receiving this mail because:
You are the assignee for the bug.

help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-248025-227-j3GDqKzRmM>