IZ82487: AUDIT START MAY FAIL IF AN OBJECT HAS A COLON IN FILE NAME APPLIES TO AIX 5300-10

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• 'audit start' may fail with an error message of '**
  failed
  setting kernel audit objects' if an object in
  /etc/security/audit/objects has a colon and followed by
  a numeric digit (1 to 7) inside the file name.
  
  For example, a stanza such as this can cause failure:
  
  /file1:1.log:
       w = FILE_Write
  

Local fix

Problem summary

• 'audit start' may fail with an error message of
  '** failed  setting kernel audit objects' if an object in
  /etc/security/audit/objects has a colon and followed by a
  numeric  digit (1 to 7) inside the file name.
  
  For example, a stanza such as this can cause failure:
  
  /file1:1.log:
  w = FILE_Write
  

Problem conclusion

• A valid condition is placed AFread function to check the
  filenames in /etc/security/audit/object file.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  IZ73543

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  AIX 5.3

• Fixed component ID

  5765G0300

Applicable component levels

• R530 PSY U839414

     UP10/09/21 I 1000