Hi there,
Since applying the last updates to FC4 from fedora site, it seems that
most of the audit messages have disappeared. However, I still get the
following when shutting down my system:
Nov 2 11:11:23 software auditd[1752]: The audit daemon is exiting.
Nov 2 11:11:23 software kernel: audit(1130929883.927:113): audit_pid=0
old=1752 by auid=4294967295
Nov 2 11:11:24 software kernel: audit(1130929884.067:114): SELinux:
unrecognized netlink message type=1009 for sclass=49
Nov 2 11:11:24 software kernel:
Nov 2 11:11:24 software kernel: audit(1130929884.067:114):
arch=40000003 syscall=102 success=no exit=-22 a0=b a1=bfa5f5b0
a2=80510f8 a3=bfa659d8 items=0 pid=3060 auid=4294967295 uid=0 gid=0
euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm="auditctl"
exe="/sbin/auditctl"
Nov 2 11:11:24 software kernel: audit(1130929884.067:114):
saddr=100000000000000000000000
Nov 2 11:11:24 software kernel: audit(1130929884.067:114): nargs=6 a0=3
a1=bfa6383c a2=10 a3=0 a4=bfa659d8 a5=c
Nov 2 11:11:24 software kernel: audit(1130929884.167:115): SELinux:
unrecognized netlink message type=1009 for sclass=49
Nov 2 11:11:24 software kernel:
Nov 2 11:11:24 software kernel: audit(1130929884.167:115):
arch=40000003 syscall=102 success=no exit=-22 a0=b a1=bfa5f5a0
a2=80510f8 a3=bfa659c8 items=0 pid=3060 auid=4294967295 uid=0 gid=0
euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm="auditctl"
exe="/sbin/auditctl"
Nov 2 11:11:24 software kernel: audit(1130929884.167:115):
saddr=100000000000000000000000
Nov 2 11:11:24 software kernel: audit(1130929884.167:115): nargs=6 a0=3
a1=bfa6382c a2=10 a3=0 a4=bfa659c8 a5=c
Some ideas about how to resolve those?
David.