Why is auditd going crazy after applying Jan-2015 security patches for Solaris10 ?

After patches applied the auditd is writing appx. 1 GB of data in log file in 4 hours on a system with nobody logged in. Auditd was restarted via cron to save log and start new one, then was ok for a period. Later the same day went crazy again. Ideas ? Thanks

This should not. Please check the audit log file and look if a specific entry is written again and again

Similar Messages

WRT54G3G: Going crazy after a day

Hello,
my WRT54G3G is going crazy after about a day. Ping times to it vary from 1ms to 30s with lots of packet losses. With kismet and wireshark I found that the device invents clients (only Cisco clients! ) and sends them "IEEE 802.11 Null function (No data)" frames. What's going on?
IEEE 802.11 Null function (No data), Flags: ....R.FT I could provide the wireshark dump, if needed.
Thanks,
Markus

Press and hold the reset button for 60 seconds...Release the reset button...Unplug the power cable from your router, wait for 30 seconds and re-connect the power cable...Now re-configure your router...It should resolve the problem.

Has someone applied the one off patch for-ONS bug 5749953 SIGBUS ERROR

Hello all,
Env:: 10g on Soalris
I need to apply the one-off patch for
Bug:5749953 -- ONS SIGBUS ERROR AFTER INSTALL PATCHSET 10.2.0.3 FOR CRS
Usually for any CPU we issue opatch apply from the patch directory.
and its mentioned in the readme.html as well.
But for this one off patch, there isn't anything mentioned in the readme.html.
All it says is
# 6. Patch the Files
#    6.1 Patch the CRS home files
#    After unlocking any protected files and saving configuration settings
#    you are now ready to run opatch using the following command.
#    As the Oracle Clusterware (CRS) software owner;
#    % opatch apply -local -oh <CRS_HOME>
#    Note: In configuration A, invoke this only on one node.
#    6.2 Patch the RDBMS home files.
#    Alert: The RDBMS portion can only be applied to an RDBMS home that
#          has been upgraded to 10.2.0.3.0.
#    For additional information please read Note.363254.1;
#    Applying one-off Oracle Clusterware patches in a mixed version home
#    environment
#    As the RDBMS software owner;
#    % opatch apply custom/server/5749953 -local -oh <RDBMS_HOME>
#    Note: In configuration A, invoke this only on one node.Could someone let me know from where i should give 'opatch apply' if patch.zip files are unzipped in /export/home/oracle/5749953 ? TIA,
JJ

The patch can always be installed in 2 ways.
1. Do a cd and then run opatch
cd <patchlocation>
opatch apply
2. Else specify the patch location as an argument
opatch apply <full path to the patch i.e the one you do cd above> ...
Both the above styles yield same result.
VJ

HT6147 is there going to be a Security patch for 1st Generation iPads?

Is theis there going to be a Security patch for 1st Generation iPads? one has been released for all of the other devices.

Probably not for the recent problem because the code error didn't show up until iOS 6. Since the original iPad cannot run iOS any later than 5.1.1 there is no need for an update in this instance.

Why My Screen goes BLACK after gaming????

*My Screen goes BLACK after gaming, or exiting Full Screen Mode*. The music keeps playing, but doesnt do anythin! It only shows the mouse pointer so i have to force shutdown. how can i see my desktop and windows??? And it isnt the batteries. Help me thks

I suspect that your game has a bug when switching between full-screen and window mode. When or if this happens again while you are still seeing the black screen press the following three keys: option, command, escape (hold down all three at the same time). You may or may not then see the "Force Quit" window. In any case, release the optioncommandescape key sequence and press the return key. This should quit the game and return you to your normal desktop. You may have to perform the "Force Quit" more than once, two or three times being the most I would expect (that is, if the first time doesn't work).

Yosemite hangs in booting after applying Update 2015-003.

I have applied Update 2015-003 to Yosemite.
After booting the progress bar hangs at about 30% for over an hour.
The hardware is a MacBook Pro with a SSD harddrive.

Take each of these steps that you haven't already tried. Stop when the problem is resolved.
To restart an unresponsive computer, press and hold the power button for a few seconds until the power shuts off, then release, wait a few more seconds, and press it again briefly.
Step 1
The first step in dealing with a startup failure is to secure the data. If you want to preserve the contents of the startup drive, and you don't already have at least one current backup, you must try to back up now, before you do anything else. It may or may not be possible. If you don't care about the data that has changed since the last backup, you can skip this step.
There are several ways to back up a Mac that is unable to start. You need an external hard drive to hold the backup data.
a. Start up from the Recovery partition, or from a local Time Machine backup volume (option key at startup.) When the OS X Utilities screen appears, launch Disk Utility and follow the instructions in this support article, under “Instructions for backing up to an external hard disk via Disk Utility.” The article refers to starting up from a DVD, but the procedure in Recovery mode is the same. You don't need a DVD if you're running OS X 10.7 or later.
b. If Step 1a fails because of disk errors, and no other Mac is available, then you may be able to salvage some of your files by copying them in the Finder. If you already have an external drive with OS X installed, start up from it. Otherwise, if you have Internet access, follow the instructions on this page to prepare the external drive and install OS X on it. You'll use the Recovery installer, rather than downloading it from the App Store.
c. If you have access to a working Mac, and both it and the non-working Mac have FireWire or Thunderbolt ports, start the non-working Mac in target disk mode. Use the working Mac to copy the data to another drive. This technique won't work with USB, Ethernet, Wi-Fi, or Bluetooth.
d. If the internal drive of the non-working Mac is user-replaceable, remove it and mount it in an external enclosure or drive dock. Use another Mac to copy the data.
Step 2
If the startup process stops at a blank gray screen with no Apple logo or spinning "daisy wheel," then the startup volume may be full. If you had previously seen warnings of low disk space, this is almost certainly the case. You might be able to start up in safe mode even though you can't start up normally. Otherwise, start up from an external drive, or else use the technique in Step 1b, 1c, or 1d to mount the internal drive and delete some files. According to Apple documentation, you need at least 9 GB of available space on the startup volume (as shown in the Finder Info window) for normal operation.
Step 3
Sometimes a startup failure can be resolved by resetting the NVRAM.
Step 4
If a desktop Mac hangs at a plain gray screen with a movable cursor, the keyboard may not be recognized. Press and hold the button on the side of an Apple wireless keyboard to make it discoverable. If need be, replace or recharge the batteries. If you're using a USB keyboard connected to a hub, connect it to a built-in port.
Step 5
If there's a built-in optical drive, a disc may be stuck in it. Follow these instructions to eject it.
Step 6
Press and hold the power button until the power shuts off. Disconnect all wired peripherals except those needed to start up, and remove all aftermarket expansion cards. Use a different keyboard and/or mouse, if those devices are wired. If you can start up now, one of the devices you disconnected, or a combination of them, is causing the problem. Finding out which one is a process of elimination.
Step 7
If you've started from an external storage device, make sure that the internal startup volume is selected in the Startup Disk pane of System Preferences.
Start up in safe mode. Note: If FileVault is enabled in OS X 10.9 or earlier, or if a firmware password is set, or if the startup volume is a software RAID, you can’t do this. Post for further instructions.
Safe mode is much slower to start and run than normal, and some things won’t work at all, including wireless networking on certain Macs.
The login screen appears even if you usually log in automatically. You must know the login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
When you start up in safe mode, it's normal to see a dark gray progress bar on a light gray background. If the progress bar gets stuck for more than a few minutes, or if the system shuts down automatically while the progress bar is displayed, the startup volume is corrupt and the drive is probably malfunctioning. In that case, go to Step 11. If you ever have another problem with the drive, replace it immediately.
If you can start and log in in safe mode, empty the Trash, and then open the Finder Info window on the startup volume ("Macintosh HD," unless you gave it a different name.) Check that you have at least 9 GB of available space, as shown in the window. If you don't, copy as many files as necessary to another volume (not another folder on the same volume) and delete the originals. Deletion isn't complete until you empty the Trash again. Do this until the available space is more than 9 GB. Then restart as usual (i.e., not in safe mode.)
If the startup process hangs again, the problem is likely caused by a third-party system modification that you installed. Post for further instructions.
Step 8
Launch Disk Utility in Recovery mode (see Step 1.) Select the startup volume, then run Repair Disk. If any problems are found, repeat until clear. If Disk Utility reports that the volume can't be repaired, the drive has malfunctioned and should be replaced. You might choose to tolerate one such malfunction in the life of the drive. In that case, erase the volume and restore from a backup. If the same thing ever happens again, replace the drive immediately.
This is one of the rare situations in which you should also run Repair Permissions, ignoring the false warnings it may produce. Look for the line "Permissions repair complete" at the end of the output. Then restart as usual.
Step 9
If the startup device is an aftermarket SSD, it may need a firmware update and/or a forced "garbage collection." Instructions for doing this with a Crucial-branded SSD were posted here. Some of those instructions may apply to other brands of SSD, but you should check with the vendor's tech support.
Step 10
Reinstall the OS. If the Mac was upgraded from an older version of OS X, you’ll need the Apple ID and password you used to upgrade.
Step 11
Do as in Step 9, but this time erase the startup volume in Disk Utility before installing. The system should automatically restart into the Setup Assistant. Follow the prompts to transfer the data from a Time Machine or other backup.
Step 12
This step applies only to models that have a logic-board ("PRAM") battery: all Mac Pro's and some others (not current models.) Both desktop and portable Macs used to have such a battery. The logic-board battery, if there is one, is separate from the main battery of a portable. A dead logic-board battery can cause a startup failure. Typically the failure will be preceded by loss of the settings for the startup disk and system clock. See the user manual for replacement instructions. You may have to take the machine to a service provider to have the battery replaced.
Step 13
If you get this far, you're probably dealing with a hardware fault. Make a "Genius" appointment at an Apple Store, or go to another authorized service provider.

Cannot download podcasts after applying latest Leopard security update

Last night I applied the latest security update to my Mac Mini, running the latest version of iTunes and Leopard. This morning I went to update my iTunes library with the latest podcasts. When I did the refresh, it started to download several podcasts, but then stopped them all with a message stating that I did not have the proper permissions. My iTunes library is on a fireware-connected DROBO that has approx. 1.5 TB free space. I have been using this configuration for over 2 months without problems.

You need to check permissions on the folder that holds your library. Navigate to your music folder, Get Info and make sure permissions are set to READ and WRITE. Then...make sure it's applied to ALL enclosed folders. (Click the Gear for the apply to all option.)

Why does Adobe Reader continue to state a software update is available after 9.4.4 security patch?

Applied security patch 9.4.4 to Adobe Reader and it continues to state that there is a software update available. It will download the same 9.4.4 patch and nothing changes - the "about adobe reader" does state it is 9.4.4 release.

You'll get a response if you report this problem on the Acrobat Reader forum.

FASTFORMULA ASSISTANT MISSING AFTER APPLYING FP.K RUP1 PATCH

We have recently applied FP.K RUP1 patch and are attempting to test the new
functionality around the Fast Formula Assisant. In the README for RUP1 it
explains that the new Fast Formula Assistant should be available with a new
menu option "FastFormula Assistant" or "Global FastFormula Assistant" within
the HRMS Menu.
These menu items have not been created against the seeded menu "UK HRMS
Navigator" which is attached to the seeded Responsibility "UK HRMS Manager".
There appears to be seeded menus for the Assistant named "FastFormula
Assistant". I have tried manually adding these to the Menus and cannot get the
Assistant to work or indeed even open up.
Are we missing any further patches or setup in order to access the Fast Formula
Assistant?

I looked at the Readme and yes it does imply that the feature should be found within the seeded UK HRMS Manager menus. I looked at my instance and Fast Formula Assistant is not there for UK HRMS Manager also. However, using the US Super HRMS Manager responsibility, it is available:
Total Compensation > Basic > Fast Formula > Fast Formula Assistant
Please log a Service Request with Oracle Support and request clarification for this issue.
Regards,
Greg

In deadlock after every release of security patch

After a security patch release is available the user has to visit the download page which
can "speak" only Flash using the vulnerable installation of Flash Player.
That means the user must expose own system to attacks in order to download the patched version.
What bad concept. Where is the Adobe specialist responcible for the concept?
Please do not claim one can trust the Adobe server and download page.
Nowadays, there is no one server nor url trustful.
Certificate issuers are not trustfull - see accidents from few last months.
So, the more the servers nor internet sides can be trustfull.
And the link to offline installer does not work due to disabled flash player
or for any other reason. See http://kb2.adobe.com/de/cps/191/tn_19166.html
and the url placed there
Flash Player 10 Plugin (Alle anderen Windows-Browser, wie etwa Firefox oder Google Chrome)
User does not decide to enable vulnerable flash installation and is not able to update
to the patched one. It is a dead-lock.

Under Adobe Forums: Forum: Flash Player ?
It is defenitely too deep in Adobe's world.
Official download page is not a forum page.
Most of normal and PC non-freaks willl look there for downloads/updates.
Link to full installer should be placed on official download page.
Additionally, this page should not use Flash Player.
Just to avoid a dead-lock when an update includes security patches.
Additionally, as JackMcNac states it above the links to off-line
installers and to be find somewhere in the Flash Online Support
do not always work - it can't be.

Applying call manager security patches

We need to apply the latest security and OS patches to our CallManager cluster.
We are running the following software versions.
Call Manager 3.3.5(sr2)
OS Image 2000.2.4
OS Service Release 2000.4.3aSR3
OS Upgrade 2000.4.3a
SQL2K Service Pack SP4
IPCC Express 3.0a
OS Image 2000.2.4
OS Service Release 2000.4.3aSR3
OS Upgrade 2000.4.3a
Unity 4.0
Build Version 4.0(2)
I have downloaded win-OS-Upgrade-K9.2000-4-5a, is this compatible? Do I require any other patches?

yes, it's compatible
Operating System Upgrade 2000.4.5a (win-OS-Upgrade-K9.2000-4-5a.exe)
Release date: 31-JULY-2007
Readme last updated: 30-JULY-2007
Information about This Service Release
The upgrade supports the following Cisco IP Telephony Applications that run on Windows 2000 Server or Advanced Server:
Cisco CallManager and all compatible versions of Cisco IP Interactive Voice Response (IP IVR), Cisco IP Call Center Express (IPCC Express), Cisco IP Queue Manager (IP QM), Cisco Personal Assistant (PA), Cisco Emergency Responder (CER), Cisco Conference Connection (CCC), Cisco MeetingPlace, and Cisco Customer Voice Portal (CVP).
Minimum OS Requirements: (Fresh Install or Upgrade Versions of) - 2000.2.7, 2000.2.7a, 2000.4.1, 2000.4.1b, 2000.4.1c, 2000.4.2, 2000.4.3, 2000.4.3a, 2000.4.4, 2000.4.4a
this info is always in the readme that is on the same location where you download the .exe, i would always recommend to go thru them
the file is:
win-OS-Upgrade-K9.2000-4-5a-Readme.htm
Unified Communications Manager & Voice Apps Crypto Software
http://www.cisco.com/cgi-bin/apps/tblbld/tablebuild.pl/cmva-3des?sort=release
there's also a table to confirm the server can support it, i'd recommend you to look at it before applying any patch
regarding unity:
Software Installed by the Cisco Unity Server Updates Wizard
http://www.cisco.com/en/US/partner/docs/voice_ip_comm/unity/updates/wizard/cuupwz.html
on the above is the link in which you can download the .exe and some more info on what will be installed
HTH
javalenc
if this helps, please rate

Fan going crazy after I just got optical drive repaired

Well my fan now sounds like a loud air conditioner or something after getting it fixed at a mac store. Just got it back today because I had to replace my optical drive. I'm assuming it's not dust since it just started, and I do have an appointment set up for it to be looked at but I was hoping to get some comments from you guys.
My computer's fans have never been this loud. And it won't go away either. They start up right when I start the computer up. I could leave it for 5 minutes without doing anything on it and they would still sound like a jet engine or something. Makes me afraid that my comp is going to fry itself or something.
Idk but I think the store must have messed up on something to make it do this. I have heard the fans before but this is crazy.

OFQ wrote:
Well my fan now sounds like a loud air conditioner or something after getting it fixed at a mac store. Just got it back today because I had to replace my optical drive.
hmm ... i wonder if your issue might be related to the experience another user had in this thread: http://discussions.apple.com/thread.jspa?threadID=2434866&tstart=0.
JGG

MSI Z77A-GD65 going crazy after Windows 8/8.1 installation.

Hey so I decided to buy a new SSD and update my system to Windows 8.1 (coming from 7), mainly for optimal BF4 gaming experience, (I also intend buying a 290X lightning or two when they come out...) . But during the process I encountered a truckload of problems, my main one is this: I was using bios version 10.7 for almost a year, with a stable 4.8GHz OC (which I managed to get done after each bios flash since I built the rig in early 2012), everything went great - this was on Windows 7.
However when I migrated to Windows 8.1 my PC wouldn't boot anymore and after 5-6 attempts it did boot and it said that all my settings were reset to default, fine. I restarted and from then on it wouldn't boot anymore no matter what. The error code on the mobo is always "19" which in manual says it's Early South Bridge initialization. I have no ideea what to do anymore, I tried plugging out SSD, HDDs, GPUs, RAM sticks, clearing cmos with back panel button. It all boiled down to either not booting or going into a boot loop.
My only solution was to switch to bios B on the multi-bios switch which is running 10.2 an almost 2 years old bios. That beeing said I can boot normally now (and fast), and the system runs great but the bios version is so old that it does not let my 2x680 MSI Lightnings work in PCIE 3.0, only 2.0...
So i'm VERY scared of what to do next, because I don't want this second bios to corrupt as well.
I always flashed my bios with Live update 5, I did this with each new bios release and never had a problem but I read that the latest bios, 10.10 is buggy, and I don't know HOW to flash my bios to an earlier version, maybe even 10.7 or 10.8 in another way. Is there a way to safely flash BOTH bioses and to repair my A bios at the same time?
TL'DR, if there isn't any safe solution to my problem I might as well just press in OC Genie button and have a mild OC until sometimes next year when I'll get a new mb + cpu + ram anyway. But if there is one, please let me know.
Any imput is apreciated, THANKS!
full config:
CPU Model: Intel Core i7 3770K 3.5GHz| Corsair H100 push pull
Motherboard: MSI Z77A-GD65
Ram: 2x 4GB Kingston HyperX T1 Black Series DDR3 2133MHz CL11 Dual Channel Kit
Video Card: 2way SLI MSI GTX 680 Lightning 2GB DDR5 256-bit
Sound Card: Realtek ALC898
Storage: Corsair force GT 120 GB(OS) + 2x WD 1TB SATA-II 7200 RPM 32MB RE3 + WD 2TB SATA-III 7200RPM 64MB Caviar Black + WD 3TB SATA-III 64MB Caviar Green
Power Supply: Nexus RX-1.1K GOLD @ 1100W
Case: Cooler Master Storm Trooper + 8x Cooler Master SickleFlow 120 Red LED + Fan controller Scythe Kaze Master Pro black = negative pressure
Keyboard: Cooler Master Storm Trigger
Mouse: Cooler Master Storm Sentinel Advance II
CD/DVD: Asus DVD drive black
Monitor: Dell U2711 REVA07 IPS
Speakers: Logitech Z-5500
OS: Windows 8.1 Pro 64bit

I just found a post of mine (from another forum) from when the error 19 thing first started, this is what happend:
Quote
I decided to buy a new SSD and update my system to Windows 8.1 (coming from 7). And I encountered a truckload of problems, my main one is this: I was using bios version 10.7 for almost a year, with a nice 4.8GHz OC stable, everything went great - this was on Windows 7.
However when I migrated to Windows 8.1 my PC wouldn't boot anymore and after 5-6 attempts it did boot and it said that all my settings were reset to default, fine. I restarted and from then on it wouldn't boot anymore no matter what. The error code on the mobo is always "19" which in manual says it's Early South Bridge initialization. I have no ideea what to do anymore, I tried plugging out SSD, HDDs, GPUs, RAM sticks, clearing cmos with back panel button. It all bolied down to either not booting or going into a boot loop.
My only solution was to switch to bios B on the multi-bios switch which is running 10.2 that is almost 2 years old. That beeing said I can boot normally now, but the bios version is so old...
As you can see it had nothing to do with me doing a bad BIOS flash, actually not even the OC... isn't there perhaps a way to fix that A BIOS?

Alarm Clock going Crazy after updating 3GS

After updating to iOS 4.1 on my 3GS when I set the alarm clock for 7am it goes off at 6am.
How can I get my phone's alarm to go off at the time a set it to, instead of an hour earlier?

I have the same problem, and so did everyone at uni I asked this week, but it seems to only be the alarms that are set to repeat each week, if you set a "one off" alarm it goes off at the right time which makes it more confusing. Must have something to do with daylight savings and the fact the government keeps making it start earlier and earlier each year.

Why do programs load slow after applying SP1 for NIDAQ 6.9.1?

I wrote a VC++ program that does simple DIO with the LabPC+ board. The machine also runs another app written in VB.
Originally, everything ran fine. I think this started after adding a VB app to the array of apps loading at startup, but now at bootup I get the "failed to initialize nipalu.dll" error. So, I applied SP1 for 6.9.1 and this error seems to have gone away. In exchange, it is taking more than a minute to load some very small programs now.
The startup order is roughly: VB app (non-NIDAQ) -> my app VC++ (NIDAQ) -> an I/O server for Siemens S7 -> Wonderware Intouch.
The VC++ app and the I/O server for Siemens S7 load slowly now. The first VB app and the last Intouch app load normally.
I'm con
templating changing the startup order but are there any other hints?

Eisan
Do you have this delay only when you have all three in the startup? Or do you still get a delay when only the VC++ app is in there?
Brian

Why is auditd going crazy after applying Jan-2015 security patches for Solaris10 ?

Similar Messages

Maybe you are looking for