search for: audispd

...: auth: Debug: master userdb out: USER 3487432705 mailadmin uid=97 gid=12 home=/var/mail/mailadmin auth_token=e0d0ed3080574ab089f1a5302d43110ffa15ec42 dovecot: imap-login: Login: user=<mailadmin>, method=PLAIN, rip=10.0.77.80, lip=10.0.78.223, mpid=29696, TLS, session=<0C+M3A/9OwCsEQFQ> audispd: node=myhost.somewhere type=SYSCALL msg=audit(1404144473.421:46298): arch=c000003e syscall=2 success=no exit=-13 a0=7fff97f77ce0 a1=c2 a2=1a4 a3=0 items=1 ppid=29697 pid=29699 auid=7033 uid=8 gid=12 euid=8 suid=8 fsuid=8 egid=12 sgid=12 fsgid=12 tty=(none) ses=108 comm="sqlite3" exe=&quot...

I'll jump in here to say we'll try your suggestion, but I guess what's not been mentioned is that we get the setroubleshoot abrt's only a few times a day, but we're getting 10000s of setroubleshoot messages in /var/log/messages a day. e.g. Dec 2 10:03:55 server audispd: queue is full - dropping event Dec 2 10:04:00 server audispd: last message repeated 199 times Dec 2 10:04:00 server rsyslogd-2177: imuxsock begins to drop messages from pid 5967 due to rate-limiting Dec 2 10:04:01 server rsyslogd-2177: imuxsock lost 2 messages from pid 5967 due to rate-limiting...

Updating a system from CentOS 5.4 (current) to 5.5, and I see: libsepol.scope_copy_callback: zosremote: Duplicate declaration in module: type/attribute zos_remote_t libsemanage.semanage_link_sandbox: Link packages failed semodule: Failed! Any ideas as to what's going on, or why? mark "glad selinux is disabled on that box"

...I guess what's > not > > been mentioned is that we get the setroubleshoot abrt's only a few times > a > > day, but we're getting 10000s of setroubleshoot messages in > > /var/log/messages a day. > > > > e.g. > > > > Dec 2 10:03:55 server audispd: queue is full - dropping event > > Dec 2 10:04:00 server audispd: last message repeated 199 times > > Dec 2 10:04:00 server rsyslogd-2177: imuxsock begins to drop messages > from > > pid 5967 due to rate-limiting > > Dec 2 10:04:01 server rsyslogd-2177: imuxsock lost...

...we get the setroubleshoot abrt's only a few > times > >> a > >>> day, but we're getting 10000s of setroubleshoot messages in > >>> /var/log/messages a day. > >>> > >>> e.g. > >>> > >>> Dec 2 10:03:55 server audispd: queue is full - dropping event > >>> Dec 2 10:04:00 server audispd: last message repeated 199 times > >>> Dec 2 10:04:00 server rsyslogd-2177: imuxsock begins to drop messages > >> from > >>> pid 5967 due to rate-limiting > >>> Dec 2 10:0...

...ere to say we'll try your suggestion, but I guess what's not > been mentioned is that we get the setroubleshoot abrt's only a few times a > day, but we're getting 10000s of setroubleshoot messages in > /var/log/messages a day. > > e.g. > > Dec 2 10:03:55 server audispd: queue is full - dropping event > Dec 2 10:04:00 server audispd: last message repeated 199 times > Dec 2 10:04:00 server rsyslogd-2177: imuxsock begins to drop messages from > pid 5967 due to rate-limiting > Dec 2 10:04:01 server rsyslogd-2177: imuxsock lost 2 messages from pid >...

...not >>> been mentioned is that we get the setroubleshoot abrt's only a few times >> a >>> day, but we're getting 10000s of setroubleshoot messages in >>> /var/log/messages a day. >>> >>> e.g. >>> >>> Dec 2 10:03:55 server audispd: queue is full - dropping event >>> Dec 2 10:04:00 server audispd: last message repeated 199 times >>> Dec 2 10:04:00 server rsyslogd-2177: imuxsock begins to drop messages >> from >>> pid 5967 due to rate-limiting >>> Dec 2 10:04:01 server rsyslogd-2177...

We are currently running libxml2-2.7.6-14.el6_5.2.x86_64 How far back would you suggest we go? would libxml2-2.7.6-14.el6_5.1.x86_64 be sufficient -----Original Message----- From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf Of Daniel J Walsh Sent: 01 December 2014 15:10 To: CentOS mailing list Subject: Re: [CentOS] SEtroubleshootd Crashing I am not sure. I was

...sk is constantly noisy. When running iotop, there is nothing blaring out at me. (sample output) 1722 be/3 root 0.00 B/s 0.00 B/s 0.00 % 0.10 % auditd 3 be/7 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [ksoftirqd/0] 1724 be/2 root 0.00 B/s 0.00 B/s 0.10 % 0.00 % audispd 10 be/3 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [kblockd/0] 103 be/3 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % [khubd] 2163 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % sshd 6265 be/4 root 0.00 B/s 0.00 B/s 0.00 % 0.00 % sshd: root at pts/1 169 be/4 ro...

...Errata and Bugfix Advisory 2014:0568 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0568.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 93ab2ebd62dcdbe9e5f8a065fb35512031a326e59677b9c2661b73c64f2fd53d audispd-plugins-2.2-4.el6_5.i686.rpm ef43d75cfd93d3476f5974376ab00c07c9bf6c4a70912b001e0fac40f3f13429 audit-2.2-4.el6_5.i686.rpm 19dd52e6aa8dd48f10050de569596e5be43328767331cbdeeb9bbf0b1695cde8 audit-libs-2.2-4.el6_5.i686.rpm 110e00faee32c97a3b01d03ed0d594559725e38ef33c36760385998fa3e660af audit-libs-de...

...xt/plain; charset=us-ascii CentOS Errata and Bugfix Advisory 2009:0443 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0443.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: d3bbe7338e07ad9d59d3d36f83021cc3 audispd-plugins-1.7.7-6.el5_3.2.i386.rpm 407b4e6e5bdfb1639fbae215ce6cb99a audit-1.7.7-6.el5_3.2.i386.rpm 2f90dd6e9b86f37a49b7323ec9fec28c audit-libs-1.7.7-6.el5_3.2.i386.rpm bdca908b02374d0e8547e57646a7595d audit-libs-devel-1.7.7-6.el5_3.2.i386.rpm cd7f944ba1861139cc776a7ca96d79b4 audit-libs-python-1.7...

...Errata and Bugfix Advisory 2014:0568 Upstream details at : https://rhn.redhat.com/errata/RHBA-2014-0568.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) i386: 93ab2ebd62dcdbe9e5f8a065fb35512031a326e59677b9c2661b73c64f2fd53d audispd-plugins-2.2-4.el6_5.i686.rpm ef43d75cfd93d3476f5974376ab00c07c9bf6c4a70912b001e0fac40f3f13429 audit-2.2-4.el6_5.i686.rpm 19dd52e6aa8dd48f10050de569596e5be43328767331cbdeeb9bbf0b1695cde8 audit-libs-2.2-4.el6_5.i686.rpm 110e00faee32c97a3b01d03ed0d594559725e38ef33c36760385998fa3e660af audit-libs-de...

...unix 3 [ ] STREAM CONNECTED 8418 1031/rpc.idmapd unix 2 [ ] DGRAM 8056 922/rpc.statd unix 2 [ ] DGRAM 7811 882/named unix 3 [ ] STREAM CONNECTED 7722 842/audispd unix 3 [ ] STREAM CONNECTED 7721 843/sedispatch unix 3 [ ] STREAM CONNECTED 7712 840/auditd unix 3 [ ] STREAM CONNECTED 7711 842/audispd unix 3 [ ] DGRAM 6724...

I did a yum update to my desktop machine as root this morning and now my regular logon account sees this whenever I press the enter key: etc/audisp/audispd.conf: Permission denied etc/audisp/plugins.d/af_unix.conf: Permission denied etc/audisp/plugins.d/syslog.conf: Permission denied etc/audit/audit.rules: Permission denied etc/audit/auditd.conf: Permission deniedetc/dhcp/dhclient.d/ntp.sh: Permission denied etc/libvirt/libvirt.conf: Permission denied...

...rrata and Bugfix Advisory 2017:0393 Upstream details at : https://rhn.redhat.com/errata/RHBA-2017-0393.html The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: f435fed3cc7ba2ca4e73e47efc5cfd0d450bf5dacc8ef7af003d78ac41a1cabd audispd-plugins-2.6.5-3.el7_3.1.x86_64.rpm 105b5290531be60613cfb0667dec8905873670c6b48cabf746634ca5eef8f0a0 audit-2.6.5-3.el7_3.1.x86_64.rpm 91043ae3beef304197872fc37bf4edc8dc84621119686bdca8686547d12de518 audit-libs-2.6.5-3.el7_3.1.i686.rpm 7958aeebb98d497a2bc14a45f52894950ca0b2942fb83f0c10b3c0f4342c84f...

...Errata and Bugfix Advisory 2018:2463 Upstream details at : https://access.redhat.com/errata/RHBA-2018:2463 The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) x86_64: 14ffe2d059c9ce83e0f7e52a6787fc8bd5cb8caa8528935cfdd9fa6f267dc240 audispd-plugins-2.8.1-3.el7_5.1.x86_64.rpm 0c9aca1d2db0c1e870a9f3f7a12a710660327aeba636f7a7d35c3531b178f71e audit-2.8.1-3.el7_5.1.x86_64.rpm 70e5131b6b98a42c18a9a3a41cd8da67d1b910bb7aa33b3191b8a798aadb6841 audit-libs-2.8.1-3.el7_5.1.i686.rpm be4aed406738260df629fbc7b7e500d29fabee3174696a7dd1d794f847dffdc...

CentOS Errata and Bugfix Advisory 2009:0443 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0443.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: d3bbe7338e07ad9d59d3d36f83021cc3 audispd-plugins-1.7.7-6.el5_3.2.i386.rpm 407b4e6e5bdfb1639fbae215ce6cb99a audit-1.7.7-6.el5_3.2.i386.rpm 2f90dd6e9b86f37a49b7323ec9fec28c audit-libs-1.7.7-6.el5_3.2.i386.rpm bdca908b02374d0e8547e57646a7595d audit-libs-devel-1.7.7-6.el5_3.2.i386.rpm cd7f944ba1861139cc776a7ca96d79b4 audit-libs-python-1.7...

CentOS Errata and Bugfix Advisory 2009:0443 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0443.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: a9d46ce783619353a8bb151a085cb00f audispd-plugins-1.7.7-6.el5_3.2.x86_64.rpm 02c1edfe5694cbfef3cff3e2eecb98dd audit-1.7.7-6.el5_3.2.x86_64.rpm d48fd66d136dd5c464049ee700ff6e20 audit-libs-1.7.7-6.el5_3.2.i386.rpm b4b077ce9948fd52cafb575619e2f707 audit-libs-1.7.7-6.el5_3.2.x86_64.rpm e6b5f4cd48d389c7162c3887d8f78f68 audit-libs-devel-1.7....

CentOS Errata and Bugfix Advisory 2009:0475 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0475.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) i386: 63330cb232705e962894fe906a3c28af audispd-plugins-1.7.7-6.el5_3.3.i386.rpm 7bdeb3c10b5d69a33879a8feeecb14b5 audit-1.7.7-6.el5_3.3.i386.rpm 2bc87f757ee46ef90da49314d4a6c4ea audit-libs-1.7.7-6.el5_3.3.i386.rpm ef8fab4b728fd2f2293be549b9da28b9 audit-libs-devel-1.7.7-6.el5_3.3.i386.rpm 0c88ba1414b3ac26dcba2674ed43b98b audit-libs-python-1.7...

CentOS Errata and Bugfix Advisory 2009:0475 Upstream details at : https://rhn.redhat.com/errata/RHBA-2009-0475.html The following updated files have been uploaded and are currently syncing to the mirrors: ( md5sum Filename ) x86_64: fe74ff12b91507084b0babfd231e8f64 audispd-plugins-1.7.7-6.el5_3.3.x86_64.rpm 203bce001df8a0420fb180dc44a3b2e8 audit-1.7.7-6.el5_3.3.x86_64.rpm e2da51b28b8f0549759c91543b3ee722 audit-libs-1.7.7-6.el5_3.3.i386.rpm 2c23ab97683977d4963799491fc686d4 audit-libs-1.7.7-6.el5_3.3.x86_64.rpm edf6e26a7cbe3813bf8a0e9d8a70a559 audit-libs-devel-1.7....