There are many dlvr_audit(ADM) processes on the system reported by
ps(C). The number of these seem to slowly increase over time,
adversely affecting system performance.
CAUSE:
There are two possible causes of this problem:
1. Auditing has been enabled on the system, but the audit daemon,
auditd(ADM), has died unexpectedly.
2. Auditing is not enabled, but an application that uses message
queues has been run and/or is running on the system. This has
created a queue with the same message id as specified in the
audit sub-system configuration file:
/tcb/files/audit/audit_dmninfo
In both cases, earlier invocations of dlvr_audit(ADM) (which is run
by many system utilities including passwd(C), lp(C) and cron(C)) put
messages in the message queue with the id specified in
/tcb/files/audit/audit_dmninfo.
This queue is now full, and any further invocation of dlvr_audit(ADM)
will block waiting for the queue to drain. The queue never drains,
causing the slowly increasing number of dlvr_audit(ADM) processes on
the system.
|