https://bugzilla.novell.com/show_bug.cgi?id=738692 https://bugzilla.novell.com/show_bug.cgi?id=738692#c0 Summary: auditd/sshd: connection terminated during zypper dup Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: x86-64 OS/Version: Linux Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: jengelh@medozas.de QAContact: qa@suse.de Found By: Beta-Customer Blocker: ---

From 11.4 to 12.1 # zypper dup --no-r Installerer: python-bonobo- 2.28.1-12.1.2 [fullført] Installerer: libgnomeui- 2.24.5-3.1.2 [fullført] Installerer: audit- 2.1.1-15.1.2 [89%]Connection to mz38 closed by remote host. Connection to mz38 closed.

Killing the ssh session off is really undesirable. /var/log/messages has to say: Dec 27 18:23:48 mz38 kernel: Kernel logging (proc) stopped. Dec 27 18:23:48 mz38 rsyslogd: [origin software="rsyslogd" swVersion="56.5" x-pid="4302" x-info="http://www.rsyslog.com"] exiting on signal 15. Dec 27 18:23:49 mz38 kernel: imklog 5.8.5, log source = /proc/kmsg started. Dec 27 18:23:49 mz38 rsyslogd: [origin software="rsyslogd" swVersion="58.5" x-pid="6444" x-info="http://www.rsyslog.com"] start Dec 27 18:23:50 mz38 auditd[2597]: The audit daemon is exiting. Dec 27 18:23:50 mz38 auditd[6484]: Started dispatcher: /sbin/audispd pid: 6486 Dec 27 18:23:50 mz38 audispd: priority_boost_parser called with: 4 Dec 27 18:23:50 mz38 audispd: max_restarts_parser called with: 10 Dec 27 18:23:50 mz38 audispd: No plugins found, exiting Dec 27 18:23:50 mz38 auditd[6484]: Init complete, auditd 2.1.1 listening for events (startup state disable) Dec 27 18:23:50 mz38 sshd[2590]: Exiting on signal 15 Dec 27 18:23:50 mz38 rsyslogd: [origin software="rsyslogd" swVersion="58.5" x-pid="6444" x-info="http://www.rsyslog.com"] rsyslogd was HUPed Dec 27 18:23:50 mz38 rsyslogd: [origin software="rsyslogd" swVersion="58.5" x-pid="6444" x-info="http://www.rsyslog.com"] rsyslogd was HUPed There were still 7 or so packages to be installed, so it did not seem like an end-of-transaction trigger. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.