Page 1 of 1

Crash and data gone on audit backlog limit...

Posted: 2021/06/02 11:08:20
by gharidas
I am seeing crash and entering grub rescue mode on hard reboot after a few messages of "audit: backlog limit exceeded" on console.

Suddenly, the above messages are seen on conosle and at this point, no commands are executable saying "/bin/ls not found", etc. On reboot, it enters grub rescue mode. On seeing the file systems, none of the partitions have the boot files, requiring reinstallation. I have seen this repeatedly.

OS Version is 7.6.1810

Could anyone please help in throwing some light on this and suggest a solution?

Thanks in Advance

Re: Crash and data gone on audit backlog limit...

Posted: 2021/06/02 11:40:01
by TrevorH
OS Version is 7.6.1810
Which has been unsupported since the release of 7.7. Run yum update to get up to date on 7.9 and see if the problem still exists.
no commands are executable saying "/bin/ls not found"
Sounds more like someone or something is overwriting your hard disk.

Re: Crash and data gone on audit backlog limit...

Posted: 2021/06/02 11:55:04
by tunk
Probably don't apply to you, but I once experienced
that the symbolic links for bin, lib, lib64 and sbin were
removed from /.

Re: Crash and data gone on audit backlog limit...

Posted: 2021/06/02 12:10:03
by jlehtone
TrevorH wrote:
2021/06/02 11:40:01
Sounds more like someone or something is overwriting your hard disk.
Considering that 7.6 has many published security holes the list of suspects is not short.