System hangs using audit-0.9.9 (and few versions before)

Steve Grubb sgrubb at redhat.com
Tue Jun 21 21:23:06 UTC 2005


On Tuesday 21 June 2005 17:11, Loulwa Salem wrote:
> # /etc/init.d/auditd restart
>  >>Stopping auditd:                                           [  OK  ]
> ------ IT hangs here -------

My guess is that auditctl was deleting the rules/watches. Did the whole 
machine freeze up or just the init script? There was a spinlock problem fixed 
yesterday - not sure if you fell into that hole. It would hang the whole 
machine.

-Steve




More information about the Linux-audit mailing list