Bug 259057 - 'BSM conversion requested for unknown event 43234' generated by audit
Summary: 'BSM conversion requested for unknown event 43234' generated by audit
Status: New
Alias: None
Product: Base System
Classification: Unclassified
Component: kern (show other bugs)
Version: 12.2-RELEASE
Hardware: amd64 Any
: --- Affects Only Me
Assignee: freebsd-bugs (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-10-11 01:07 UTC by khaine
Modified: 2021-10-11 01:07 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description khaine 2021-10-11 01:07:08 UTC 
keep getting the following errors in my daily run output email:

Security check:

Build.local kernel log messages:
+BSM conversion requested for unknown event 43234
+BSM conversion requested for unknown event 43234

When I check /var/log/messages I see the following:

Code:
Sep  9 01:30:23 Build auditd[67137]: renamed /var/audit/20210908140000.not_terminated to /var/audit/20210908140000.20210908153023
Sep  9 01:30:23 Build auditd[67137]: New audit file is /var/audit/20210908153023.not_terminated
Sep  9 01:30:23 Build root[66179]: audit warning: closefile /var/audit/20210908140000.20210908153023
Sep  9 01:30:23 Build root[67473]: audit warning: expired /var/audit/20210906155748.20210906155749.gz
Sep  9 01:30:23 Build root[67608]: audit warning: expired /var/audit/20210906155749.20210906155750.gz
Sep  9 01:30:27 Build kernel: BSM conversion requested for unknown event 43234
Sep  9 01:30:27 Build syslogd: last message repeated 11 times

It appears to be similar to similar to bug #248025