Red Hat Bugzilla – Bug 158011
audit log has "type=(null) msg=(null)"
Last modified: 2007-11-30 17:11:06 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.8) Gecko/20050512 Fedora/1.0.4-2 Firefox/1.0.4
Description of problem:
Not sure what this should be filed against but...
Clean install of fc4t3 + rawhide updates as of 5/16/2005 on an 64 bit smp xeon system. I get messages in my /var/log/audit/audit.log like this:
I've tried relabling but that hasn't fixed it. I know I can trigger the above messages just by trying to start dovecot from the /etc/init.d/dovecot script. (Strangely, if I just run 'dovecot' as root, it starts.)
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. install dovecot
2. try to start it
Actual Results: Null error messages in /var/log/audit/audit.log
Expected Results: meaningful audit messages?
May 17th updates don't fix it either. (I thought maybe the libsepol updates
might have helped.)
This is a known issue. The kernel has message types that the audit system didn't
understand. audit 0.8.1 was put into the build system yesterday to fix this.
Please upgrade to it when its available. If you want to build the package
yourself, you can find it at people.redhat.com/sgrubb/audit. Hope this helps.
It missed today's rawhide so I rebuilt it myself and it works. Thanks.
*** Bug 158130 has been marked as a duplicate of this bug. ***