https://bugzilla.novell.com/show_bug.cgi?id=273409 ------- Comment #1 from tonyj@novell.com 2007-05-11 09:42 MST ------- I thought I was able to reproduce this, I distinctly recall seeing the file chmod'd only as a result of a SIGUSR1. Today on 3 different systems (1 x86_64, 2 i386/qemu) I'm totally unable to reproduce. I tried generating a large audit log before the upgrade, that didn't trip it either. I asked Marcus to try it too, seems to be working fine on his ppc-10.2 system. linux-vm1:/tmp/foo # ls -l /var/log/audit total 39296 -rw-r----- 1 root root 40190544 May 11 08:11 audit.log linux-vm1:/tmp/foo # du -hs /var/log/audit 39M /var/log/audit linux-vm1:/tmp/foo # rpm -qa | grep audit audit-libs-1.2.6-20 audit-1.2.6-20 linux-vm1:/tmp/foo # ps -ef | grep audit root 2147 6 0 05:53 ? 00:00:04 [kauditd] root 3325 1 3 07:52 ? 00:00:45 /sbin/auditd root 3399 3389 0 08:13 pts/0 00:00:00 grep audit linux-vm1:/tmp/foo # rpm -qp audit* audit-libs-1.2.6-22 audit-1.2.6-22 linux-vm1:/tmp/foo # rpm -Uhv audit* Preparing... 1:audit-libs 2:audit Updating etc/sysconfig/auditd... linux-vm1:/tmp/foo # ls -l /var/log/audit/audit.log* -rw-r----- 1 root root 334 May 11 08:13 /var/log/audit/audit.log -r--r----- 1 root root 40190680 May 11 08:13 /var/log/audit/audit.log.1 linux-vm1:/tmp/foo # vi /etc/sysconfig/auditd linux-vm1:/tmp/foo # /etc/init.d/auditd restart Shutting down auditd Starting auditd linux-vm1:/tmp/foo # ls -l /var/log/audit* -rw-r----- 1 root root 794 May 11 08:13 /var/log/audit/audit.log -r--r----- 1 root root 40190680 May 11 08:13 /var/log/audit/audit.log.1 linux-vm1:/tmp/foo # ps -ef | grep audit root 2147 6 0 05:53 ? 00:00:04 [kauditd] root 3456 1 0 08:13 ? 00:00:00 /sbin/auditd root 3463 3389 0 08:14 pts/0 00:00:00 grep audit linux-vm1:/tmp/foo # kill -SIGUSR1 3456 linux-vm1:/tmp/foo # ps -ef | grep audit root 2147 6 0 05:53 ? 00:00:04 [kauditd] root 3456 1 0 08:13 ? 00:00:00 /sbin/auditd root 3465 3389 0 08:14 pts/0 00:00:00 grep audit linux-vm1:/tmp/foo # ls -l /var/log/audit/* -rw-r----- 1 root root 102 May 11 08:14 /var/log/audit/audit.log -r--r----- 1 root root 794 May 11 08:13 /var/log/audit/audit.log.1 -r--r----- 1 root root 40190680 May 11 08:13 /var/log/audit/audit.log.2 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.