Bug 444027
Summary: | weird messages in /var/log/messages | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Matěj Cepl <mcepl> | ||||||
Component: | selinux-policy | Assignee: | Daniel Walsh <dwalsh> | ||||||
Status: | CLOSED WORKSFORME | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
Severity: | low | Docs Contact: | |||||||
Priority: | low | ||||||||
Version: | rawhide | CC: | jkubin, mcepl, sgrubb | ||||||
Target Milestone: | --- | Keywords: | SELinux | ||||||
Target Release: | --- | ||||||||
Hardware: | All | ||||||||
OS: | Linux | ||||||||
Whiteboard: | |||||||||
Fixed In Version: | Doc Type: | Bug Fix | |||||||
Doc Text: | Story Points: | --- | |||||||
Clone Of: | Environment: | ||||||||
Last Closed: | 2008-05-06 21:15:38 UTC | Type: | --- | ||||||
Regression: | --- | Mount Type: | --- | ||||||
Documentation: | --- | CRM: | |||||||
Verified Versions: | Category: | --- | |||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||
Embargoed: | |||||||||
Attachments: |
|
Description
Matěj Cepl
2008-04-24 16:51:24 UTC
Are you installing some kind of audit rules? If yes, then by mistake. How could I know? I don't know. Steve any ideas? These messages seem to be coming from the kernel. It looks like a bunch of audit by selinux type rules were loaded. These would be something like: auditctl -a exit,always -F subj_type=mcstransd_t They could either be loaded at the commandline or /etc/audit/audit.rules. Anyways it looks like maybe a change to policy occurred that made the rules invalid. So, the kernel was warning that the rules were being deleted after that policy was loaded. Created attachment 303820 [details]
/etc/audit/auditd.conf
Created attachment 303821 [details]
/etc/audit/audit.rules
And I swear I have never ever seen command like you mentioned in my life, even
less I would type with my hands.
Could a post install script of an rpm have caused this or a rhts test script? (In reply to comment #7) > Could a post install script of an rpm have caused this or a rhts test script? The question was probably not targeted towards me, but just to note that I have never had anything to do with RHTS, and even more it doesn't touch my personal computer. Are you continuing to see this on reboot? Have you seen this again? No error message since 2008-04-26. Thanks a lot. |