[Bug 248025] 'BSM conversion requested for unknown event 43115' generated by audit
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Thu Jul 16 19:13:57 UTC 2020
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=248025
--- Comment #1 from James B. Byrne <byrnejb at harte-lyne.ca> ---
Seems to be related to audit itself somehow.
Jul 14 15:00:36 <security.notice> vhost04 auditd[880]: renamed
/var/audit/20200714190020.not_terminated. to
/var/audit/20200714190020.20200714190036.
Jul 14 15:00:36 <security.notice> vhost04 auditd[880]: New audit file is
/var/audit/20200714190036.not_terminated.
Jul 14 15:00:36 <security.warn> vhost04 root[15372]: audit warning: closefile
/var/audit/20200714190020.20200714190036.
Jul 14 15:00:36 <security.warn> vhost04 root[15373]: audit warning: expired
/var/audit/20200714185713.20200714185728.
Jul 14 15:00:41 <kern.crit> vhost04 kernel: BSM conversion requested for
unknown event 43115
Jul 14 15:01:06 <kern.crit> vhost04 syslogd: last message repeated 51 times
Jul 14 15:01:06 <security.notice> vhost04 auditd[880]: renamed
/var/audit/20200714190036.not_terminated. to
/var/audit/20200714190036.20200714190106.
Jul 14 15:01:06 <security.notice> vhost04 auditd[880]: New audit file is
/var/audit/20200714190106.not_terminated.
Jul 14 15:01:06 <security.warn> vhost04 root[20507]: audit warning: closefile
/var/audit/20200714190036.20200714190106.
Jul 14 15:01:06 <kern.crit> vhost04 kernel: BSM conversion requested for
unknown event 43115
--
You are receiving this mail because:
You are the assignee for the bug.
More information about the freebsd-bugs
mailing list