<div dir="ltr">aproppos incorrect time, I wrote a fake-hwclock service for centos, available here: <div><a href="https://github.com/kristjanvalur/fake-hwclock">https://github.com/kristjanvalur/fake-hwclock</a><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 5 August 2018 at 13:02, Robert Moskowitz <span dir="ltr"><<a href="mailto:rgm@htt-consult.com" target="_blank">rgm@htt-consult.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I had to reboot a server this morning. I was working on one box and bumped things I should not have...<br>
<br>
Then I noticed my name server was not coming up real fast like normal. So I get on the console and notice it is waiting for something to start. It waited 3 min before giving up and getting everything else going. So after it was up, I ssh in and checked the messages and found:<br>
<br>
Dec 31 19:00:29 onlo systemd: Starting Security Auditing Service...<br>
Dec 31 19:00:29 onlo auditd[499]: Started dispatcher: /sbin/audispd pid: 501<br>
Dec 31 19:00:29 onlo audispd: No plugins found, exiting<br>
Dec 31 19:01:59 onlo systemd: auditd.service start operation timed out. Terminat<br>
ing.<br>
Dec 31 19:03:30 onlo systemd: auditd.service stop-final-sigterm timed out. Killi<br>
ng.<br>
Dec 31 19:03:30 onlo systemd: auditd.service: control process exited, code=kille<br>
d status=9<br>
Dec 31 19:03:30 onlo systemd: Failed to start Security Auditing Service.<br>
Dec 31 19:03:30 onlo systemd: Unit auditd.service entered failed state.<br>
Dec 31 19:03:30 onlo systemd: auditd.service failed.<br>
<br>
<br>
Ignore the timestamp. This occurs before the network is up and chrony has not set the time. Cubies do not have a battery RTC.<br>
<br>
But I believe this is recent. I had gone a LONG time without updating and applied some 180 rpms updates (in careful batches). So this MAY be something new.<br>
<br>
<br>
systemctl -l status auditd<br>
<br>
Shows<br>
<br>
● auditd.service - Security Auditing Service<br>
Loaded: loaded (/usr/lib/systemd/system/audit<wbr>d.service; enabled; vendor prese<br>
t: enabled)<br>
Active: failed (Result: signal) since Wed 1969-12-31 19:03:30 EST; 48 years 7<br>
months ago<br>
Docs: man:auditd(8)<br>
<a href="https://github.com/linux-audit/audit-documentation" rel="noreferrer" target="_blank">https://github.com/linux-audit<wbr>/audit-documentation</a><br>
Process: 498 ExecStart=/sbin/auditd (code=killed, signal=KILL)<br>
<br>
Dec 31 19:00:29 <a href="http://onlo.htt-consult.com" rel="noreferrer" target="_blank">onlo.htt-consult.com</a> systemd[1]: Starting Security Auditing Serv<br>
ice...<br>
Dec 31 19:00:29 <a href="http://onlo.htt-consult.com" rel="noreferrer" target="_blank">onlo.htt-consult.com</a> auditd[499]: Started dispatcher: /sbin/audi<br>
spd pid: 501<br>
Dec 31 19:01:59 <a href="http://onlo.htt-consult.com" rel="noreferrer" target="_blank">onlo.htt-consult.com</a> systemd[1]: auditd.service start operation<br>
timed out. Terminating.<br>
Dec 31 19:03:30 <a href="http://onlo.htt-consult.com" rel="noreferrer" target="_blank">onlo.htt-consult.com</a> systemd[1]: auditd.service stop-final-sigte<br>
rm timed out. Killing.<br>
Dec 31 19:03:30 <a href="http://onlo.htt-consult.com" rel="noreferrer" target="_blank">onlo.htt-consult.com</a> systemd[1]: auditd.service: control process<br>
exited, code=killed status=9<br>
Dec 31 19:03:30 <a href="http://onlo.htt-consult.com" rel="noreferrer" target="_blank">onlo.htt-consult.com</a> systemd[1]: Failed to start Security Auditi<br>
ng Service.<br>
Dec 31 19:03:30 <a href="http://onlo.htt-consult.com" rel="noreferrer" target="_blank">onlo.htt-consult.com</a> systemd[1]: Unit auditd.service entered fai<br>
led state.<br>
Dec 31 19:03:30 <a href="http://onlo.htt-consult.com" rel="noreferrer" target="_blank">onlo.htt-consult.com</a> systemd[1]: auditd.service failed.<br>
<br>
So what may be going on?<br>
<br>
My web server, <a href="http://medon.htt-consult.com" rel="noreferrer" target="_blank">medon.htt-consult.com</a> is practically identical and is not exhibiting this behavior.<br>
<br>
Dec 31 19:00:30 medon auditd[499]: Started dispatcher: /sbin/audispd pid: 501<br>
Dec 31 19:00:30 medon auditd[499]: Init complete, auditd 2.8.1 listening for events (startup state enable)<br>
<br>
<br>
______________________________<wbr>_________________<br>
Arm-dev mailing list<br>
<a href="mailto:Arm-dev@centos.org" target="_blank">Arm-dev@centos.org</a><br>
<a href="https://lists.centos.org/mailman/listinfo/arm-dev" rel="noreferrer" target="_blank">https://lists.centos.org/mailm<wbr>an/listinfo/arm-dev</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">Kv,<div>Kristján Valur Jónsson, RVX</div></div></div>
</div>