Results 1 to 1 of 1
I have a regular backup that runs every 4 or 5 days. Essentially it tars up everything into multiple tar files. I then tar the tar files and gzip them. ...
- 11-07-2007 #1
Backups (tar and gzip) fail due to auditd -- please help
I have a regular backup that runs every 4 or 5 days. Essentially it tars up everything into multiple tar files. I then tar the tar files and gzip them. After gzipping them, I copy off the file to a NAS drive. This was working great until a couple of days ago. Now, either when the backup is gzipping or copying the file to the NAS drive it fails. The script completes, as it updates an "elapsed_time.txt" file; however, the backup is missing.
I believe that the failure occurs during the mv command where I move the backup from the temp location to the NAS drive.
The only hints I can find as to what may be the cause is this line in my /var/log/messages (actually, this message is repeated 10-50 times):
kernel: audit(1194392290.234:89): REJECTING access to capability 'sys_resource' (syslog-ng(2347) profile /sbin/syslog-ng active /sbin/syslog-ng)
I have also seen the following:
auditd[1921]: Audit daemon has no space left on logging partition
I have plenty of free space on my disk and each of my partitions. I also edited the /etc/audit.rules and doubled my buffer size to (but of course, it still failed)
I tried clearing up log files, but I can't seem to fix the issue.
I disabled auditd during the backup, but it didn't make a difference:
I am running:
OpenSuse 10.2
Thanks in advance.


Reply With Quote