[SOLVED] vsftpd generates kernel messages - kernel: audit: type=1326 ... sig=31 ... syscall=37

aaazen · 04-24-2015, 11:33 AM

On Slackware64 current I started getting new kernel messages in /var/log/messages this morning. There was one message for each ftp file transfer from the running vsftpd server.

Here is an example:

Code:

kernel: audit: type=1326 audit(1429889307.099:48): auid=4294967295 uid=99 gid=99 ses=4294967295 pid=2981 comm="vsftpd" exe="/usr/sbin/vsftpd" sig=31 arch=c000003e syscall=37 compat=0 ip=0x7f266413f517 code=0x0

After doing some research, https://bugs.debian.org/cgi-bin/bugr...cgi?bug=735357,
I discovered a simple fix.

Modify /etc/vsftpd.conf and add this line:

seccomp_sandbox=NO

Then stop and restart vsftpd

ndr · 11-23-2015, 10:21 AM

Thanks! I had the exact same problem, you solved it for me. Did you eventually stay with vsftpd? Because it's starting to look a bit too buggy for my taste.