I'm running Trusted Solaris 8 7/03 on a Sunfire v210.
I continuously receive the following error message in /var/adm/messages
Oct1 11:21:15 alpha auditwrite(3)[21457]:[ID 652923 user.alert] aborted:aw_errno = 4 = audit(2) failed, errno = 9 = Bad file number
I have not placed any software on the machine that calls auditwrite.
Thanks.
Audit record generation is built into many Trusted Solaris programs. One such example is generation of audit records for failed log ins.
You may want to try running 'audit -n' from an admin_high secadmin window - this will cause it to close the current audit file and open a new one - this may fix the errors you are seeing.
I am receiving the same identical error with a script that is run under cron. Invoking the script in a session does not generate this error. However, invoking this script from the role's cron does. I am also seeing this under TSOL 8 HW 7/03. Does anyone have any workarounds or do I just del with polluted system logs?
Thank you
KC
