Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 17 Jun 2026 11:58:51 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 296107] auditdistd broken in FreeBSD 15
Message-ID:  <bug-296107-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296107

            Bug ID: 296107
           Summary: auditdistd broken in FreeBSD 15
           Product: Base System
           Version: 15.1-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: daniel.porsch@loopia.se

Hi, 

I recently upgraded from FreeBSD 14.4 to 15.1 and after doing that auditdistd
senders can no longer send audit logs to receivers.

Getting this error message on the sender:

Unable to receive welcome message from x.x.x: Socket is not connected.
Unable to connect to x.x.x.x: Operation timed out.

When asking Claude about it, it suggested that it might be related to the
AF_UNIX/SOCK_STREAM changes in the FreeBSD 15 kernel ( as noted in the release
notes for 15.0)
Auditdistd is using socketpair(PF_UNIX, SOCK_STREAM


procstat from a stuck sender:
  PID    TID COMM                TDNAME              KSTACK
75267 100740 auditdistd          -                   mi_switch
sleepq_catch_signals sleepq_wait_sig _sleep sbwait
uipc_soreceive_stream_or_seqpacket soreceive kern_recvit sys_recvfrom
amd64_syscall fast_syscall_common

Any ideas?

-- 
You are receiving this mail because:
You are the assignee for the bug.

home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-296107-227>