[Bug 259057] 'BSM conversion requested for unknown event 43234' generated by audit

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 11 Oct 2021 01:07:08 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=259057

            Bug ID: 259057
           Summary: 'BSM conversion requested for unknown event 43234'
                    generated by audit
           Product: Base System
           Version: 12.2-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: khaine@gmail.com

keep getting the following errors in my daily run output email:

Security check:

Build.local kernel log messages:
+BSM conversion requested for unknown event 43234
+BSM conversion requested for unknown event 43234

When I check /var/log/messages I see the following:

Code:
Sep  9 01:30:23 Build auditd[67137]: renamed
/var/audit/20210908140000.not_terminated to
/var/audit/20210908140000.20210908153023
Sep  9 01:30:23 Build auditd[67137]: New audit file is
/var/audit/20210908153023.not_terminated
Sep  9 01:30:23 Build root[66179]: audit warning: closefile
/var/audit/20210908140000.20210908153023
Sep  9 01:30:23 Build root[67473]: audit warning: expired
/var/audit/20210906155748.20210906155749.gz
Sep  9 01:30:23 Build root[67608]: audit warning: expired
/var/audit/20210906155749.20210906155750.gz
Sep  9 01:30:27 Build kernel: BSM conversion requested for unknown event 43234
Sep  9 01:30:27 Build syslogd: last message repeated 11 times

It appears to be similar to similar to bug #248025

-- 
You are receiving this mail because:
You are the assignee for the bug.