Hello, we have servers with many auditd rules (150+, I can provide the .rules file to you for testing).
Before kernel update there was no issue with: 5.15.0-140-generic #150 Now the issue persists even after upgrading to proposed 5.15.0-160-generic #170 /sbin/augenrules --load fails after parsing 135 lines of audit.d rules, no matter what rules we use: root@xxx:~# uname -a Linux xxx 5.15.0-160-generic #170-Ubuntu SMP Wed Oct 1 10:06:56 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux root@xxx:~# /sbin/augenrules --load /sbin/augenrules: No change No rules enabled 1 failure 1 pid 3348 rate_limit 0 backlog_limit 8192 lost 0 backlog 116 backlog_wait_time 60000 backlog_wait_time_actual 0 enabled 1 failure 1 pid 3348 rate_limit 0 backlog_limit 8192 lost 0 backlog 120 backlog_wait_time 60000 backlog_wait_time_actual 0 enabled 1 failure 1 pid 3348 rate_limit 0 backlog_limit 8192 lost 0 backlog 63 backlog_wait_time 60000 backlog_wait_time_actual 0 arch elf mapping not found There was an error in line 135 of /etc/audit/audit.rules -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2126434 Title: [Regression Updates] System hangs when loading audit rules (5.15.0-156.166) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2126434/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
