[Bug 248025] 'BSM conversion requested for unknown event 43115' generated by audit

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Jul 16 19:13:57 UTC 2020


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=248025

--- Comment #1 from James B. Byrne <byrnejb at harte-lyne.ca> ---
Seems to be related to audit itself somehow.

Jul 14 15:00:36 <security.notice> vhost04 auditd[880]: renamed
/var/audit/20200714190020.not_terminated. to
/var/audit/20200714190020.20200714190036.
Jul 14 15:00:36 <security.notice> vhost04 auditd[880]: New audit file is
/var/audit/20200714190036.not_terminated.
Jul 14 15:00:36 <security.warn> vhost04 root[15372]: audit warning: closefile
/var/audit/20200714190020.20200714190036.
Jul 14 15:00:36 <security.warn> vhost04 root[15373]: audit warning: expired
/var/audit/20200714185713.20200714185728.
Jul 14 15:00:41 <kern.crit> vhost04 kernel: BSM conversion requested for
unknown event 43115
Jul 14 15:01:06 <kern.crit> vhost04 syslogd: last message repeated 51 times
Jul 14 15:01:06 <security.notice> vhost04 auditd[880]: renamed
/var/audit/20200714190036.not_terminated. to
/var/audit/20200714190036.20200714190106.
Jul 14 15:01:06 <security.notice> vhost04 auditd[880]: New audit file is
/var/audit/20200714190106.not_terminated.
Jul 14 15:01:06 <security.warn> vhost04 root[20507]: audit warning: closefile
/var/audit/20200714190036.20200714190106.
Jul 14 15:01:06 <kern.crit> vhost04 kernel: BSM conversion requested for
unknown event 43115

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list