When my cron script forces the rotate of the audit trail file by audit -n. A zombie process is created. root@vados:~ # service auditd status auditd is running as pid 15967. root@vados:~ # audit -n Trigger sent. 64 processes: 1 running, 62 sleeping, 1 zombie root@vados:~ # service auditd stop Trigger sent. root@vados:~ # service auditd start Starting auditd. 63 processes: 1 running, 62 sleeping So it seems to keep running but creates one zombie after "audit -n".
*** This bug has been marked as a duplicate of bug 229381 ***