Hi there,
Since applying the last updates to FC4 from fedora site, it seems that most of the audit messages have disappeared. However, I still get the following when shutting down my system:
Nov 2 11:11:23 software auditd[1752]: The audit daemon is exiting. Nov 2 11:11:23 software kernel: audit(1130929883.927:113): audit_pid=0 old=1752 by auid=4294967295 Nov 2 11:11:24 software kernel: audit(1130929884.067:114): SELinux: unrecognized netlink message type=1009 for sclass=49 Nov 2 11:11:24 software kernel: Nov 2 11:11:24 software kernel: audit(1130929884.067:114): arch=40000003 syscall=102 success=no exit=-22 a0=b a1=bfa5f5b0 a2=80510f8 a3=bfa659d8 items=0 pid=3060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm="auditctl" exe="/sbin/auditctl" Nov 2 11:11:24 software kernel: audit(1130929884.067:114): saddr=100000000000000000000000 Nov 2 11:11:24 software kernel: audit(1130929884.067:114): nargs=6 a0=3 a1=bfa6383c a2=10 a3=0 a4=bfa659d8 a5=c Nov 2 11:11:24 software kernel: audit(1130929884.167:115): SELinux: unrecognized netlink message type=1009 for sclass=49 Nov 2 11:11:24 software kernel: Nov 2 11:11:24 software kernel: audit(1130929884.167:115): arch=40000003 syscall=102 success=no exit=-22 a0=b a1=bfa5f5a0 a2=80510f8 a3=bfa659c8 items=0 pid=3060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm="auditctl" exe="/sbin/auditctl" Nov 2 11:11:24 software kernel: audit(1130929884.167:115): saddr=100000000000000000000000 Nov 2 11:11:24 software kernel: audit(1130929884.167:115): nargs=6 a0=3 a1=bfa6382c a2=10 a3=0 a4=bfa659c8 a5=c
Some ideas about how to resolve those?
David.