https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=296107
Bug ID: 296107
Summary: auditdistd broken in FreeBSD 15
Product: Base System
Version: 15.1-RELEASE
Hardware: Any
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: kern
Assignee: [email protected]
Reporter: [email protected]
Hi,
I recently upgraded from FreeBSD 14.4 to 15.1 and after doing that auditdistd
senders can no longer send audit logs to receivers.
Getting this error message on the sender:
Unable to receive welcome message from x.x.x: Socket is not connected.
Unable to connect to x.x.x.x: Operation timed out.
When asking Claude about it, it suggested that it might be related to the
AF_UNIX/SOCK_STREAM changes in the FreeBSD 15 kernel ( as noted in the release
notes for 15.0)
Auditdistd is using socketpair(PF_UNIX, SOCK_STREAM
procstat from a stuck sender:
PID TID COMM TDNAME KSTACK
75267 100740 auditdistd - mi_switch
sleepq_catch_signals sleepq_wait_sig _sleep sbwait
uipc_soreceive_stream_or_seqpacket soreceive kern_recvit sys_recvfrom
amd64_syscall fast_syscall_common
Any ideas?
--
You are receiving this mail because:
You are the assignee for the bug.
