Description of problem: During shutdowns a message like the following one shows from some time: Syncing hardware clock to system time audit(1133485819.999:126): user pid=12098 uid=0 auid=4294967295 msg='changing system time: exe="/sbin/hwclock" (hostname=?, addr=?, terminal=console res=failed)' BTW, 4294967295 for auid is 0xffffffff (and arch from where this message was copied is x86_64). This is quite far down in a shutdown sequence so it is not logged and hard to capture other than copying it from a screen. Does that really means that syncing hardware clock to system time failed? I am not sure that this detail that audit daemon was closed already a number of steps ago is relevant. If it is then maybe /sbin/hwclock should run somewhare on the beggining of the whole sequence? If one runs '/sbin/hwclock --systohc -u' while system is up this does not trigger any messages like the one above. Version-Release number of selected component (if applicable): initscripts-8.17-1 How reproducible: on every shutdown
No, it means logging the message to auditd failed (as auditd isn't running any more.) See bug 165611.