Solaris_audit invalid audit flag specified: : Invalid argument
Hi All,
Recently i have upgrade Solaris 11.3 to 11.4.
I Have hit the following bug :
After pkg update to Solaris 11.4, the auditd SMF Service is in Maintenance Due to "audit service misconfiguration detected (audit: audit_sstore "p_flags" contains the following invalid audit flag: 'sstore')" (Doc ID 2471754.1)
# svcs auditd
STATE STIME FMRI
online 18:53:04 svc:/system/auditd:default
After fixing the Issue,
I notice the the flow of invalid audit flag error message:
Jan 21 16:00:00 hostname cron[15585]: [ID 574227 user.alert] Solaris_audit invalid audit flag specified: : Invalid argument
Jan 21 16:00:00 hostname cron[15586]: [ID 574227 user.alert] Solaris_audit invalid audit flag specified: : Invalid argument
Jan 21 16:00:00 hostname cron[15585]: [ID 574227 user.alert] Solaris_audit invalid audit flag specified: : Invalid argument