Package: auditd Version: 1:2.8.4-3 Severity: normal Dear Maintainer,
when installing the auditd package with apt, in some rare cases the first start of the daemon runs into a timeout (no rules configured at this time). A simple "apt --fix-broken install" restarts auditd and everything seems to run properly, but the error in the first place breaks any subsequent installations, when running them automated. Apt logs the following when the error occours: Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service. Job for auditd.service failed because a timeout was exceeded. See "systemctl status auditd.service" and "journalctl -xe" for details. invoke-rc.d: initscript auditd, action "start" failed. Auditd log shows the following afterwards: $ sudo journalctl -u auditd Jun 08 09:29:19 deb10test systemd[1]: Starting Security Auditing Service... Jun 08 09:29:19 deb10test auditd[17160]: Started dispatcher: /sbin/audispd pid: 17162 Jun 08 09:30:49 deb10test systemd[1]: auditd.service: Start operation timed out. Terminating. Jun 08 09:32:20 deb10test systemd[1]: auditd.service: State 'stop-sigterm' timed out. Killing. Jun 08 09:32:20 deb10test systemd[1]: auditd.service: Killing process 17159 (auditd) with signal SIGKILL. Jun 08 09:32:20 deb10test systemd[1]: auditd.service: Killing process 17160 (auditd) with signal SIGKILL. Jun 08 09:32:20 deb10test systemd[1]: auditd.service: Control process exited, code=killed, status=9/KILL Jun 08 09:32:20 deb10test systemd[1]: auditd.service: Failed with result 'timeout'. Jun 08 09:32:20 deb10test systemd[1]: Failed to start Security Auditing Service. Please let me know if any further information is required to track this issue. Regards, Patrick -- System Information: Debian Release: 10.4 Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-6-amd64 (SMP w/2 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) Versions of packages auditd depends on: ii gawk 1:4.2.1+dfsg-1 ii libaudit1 1:2.8.4-3 ii libauparse0 1:2.8.4-3 ii libc6 2.28-10 ii libgssapi-krb5-2 1.17-3 ii libkrb5-3 1.17-3 ii libwrap0 7.6.q-28 ii lsb-base 10.2019051400 ii mawk 1.3.3-17+b3 auditd recommends no packages. Versions of packages auditd suggests: pn audispd-plugins <none> -- no debconf information
