Description of problem: audisp-remote does > memset (&address, 0, sizeof(address)); > address.sin_family = htons(AF_INET); > address.sin_port = htons(config.local_port); > address.sin_addr.s_addr = htonl(INADDR_ANY); which shows in strace as > bind(3, {sa_family=0x200 /* AF_??? */, sa_data="\0<\0\0\0\0\0\0\0\0\0\0\0\0"}, 16) = 0 For some reason the call still succeeds, but a correct invocation would not call htons on AF_INET.
It works because the audit daemon also has a matching mistake. Fixed in revision 505.
And is the daemon really listening on IPv4 port in this case or not?
2.1.1 is in rawhide and the testing repo which fixes this issue. Thanks for reporting it.