From mboxrd@z Thu Jan 1 00:00:00 1970 From: Dan Gruhn Subject: auditctl -1 User ID Date: Wed, 18 Feb 2009 12:16:14 -0500 Message-ID: <499C425E.1050804@groupw.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Return-path: Received: from mx3.redhat.com (mx3.redhat.com [172.16.48.32]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id n1IHHC7f013917 for ; Wed, 18 Feb 2009 12:17:12 -0500 Received: from smtp.group-w-inc.com (group-w-inc.com [70.164.45.3]) by mx3.redhat.com (8.13.8/8.13.8) with ESMTP id n1IHGFJg032263 for ; Wed, 18 Feb 2009 12:16:21 -0500 Received: from smtp.group-w-inc.com (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with ESMTP id 58E7ADA00A4 for ; Wed, 18 Feb 2009 12:16:15 -0500 (EST) Received: from [10.1.1.218] (dgruhn-f9.group-w-inc.com [10.1.1.218]) by smtp.group-w-inc.com (Postfix) with ESMTP id 23119DA0094 for ; Wed, 18 Feb 2009 12:16:15 -0500 (EST) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com I'm getting an auditctl startup SELinux violation that is showing up with a user ID of -1 (4294967295 in my case). I can fix the violation, but before I do I thought I saw something a while back about setting a parameter or defining a variable on power-up so that one didn't get the -1 for something that came up in the wrong order. I've search blog.gmane.org/gmane.linux.redhat.security.audit and can't seem to find it. Am I all wet or can someone help me with this? Thanks, Dan