Description of problem:
During shutdowns a message like the following one shows from some time:
Syncing hardware clock to system time audit(1133485819.999:126): user
pid=12098 uid=0 auid=4294967295 msg='changing system time:
exe="/sbin/hwclock" (hostname=?, addr=?, terminal=console res=failed)'
BTW, 4294967295 for auid is 0xffffffff (and arch from where this message
was copied is x86_64).
This is quite far down in a shutdown sequence so it is not logged and hard
to capture other than copying it from a screen.
Does that really means that syncing hardware clock to system time failed?
I am not sure that this detail that audit daemon was closed already a number
of steps ago is relevant. If it is then maybe /sbin/hwclock should run
somewhare on the beggining of the whole sequence? If one runs
'/sbin/hwclock --systohc -u' while system is up this does not trigger any
messages like the one above.
Version-Release number of selected component (if applicable):
on every shutdown
No, it means logging the message to auditd failed (as auditd isn't running any
more.) See bug 165611.