We have a problem with our test Mac OS X 10.5.x systems where audit
are not being properly terminated. Is that a problem unique to our
Or is there any projection for when proper termination will work?
It is a common problem, but I think Apple is targeting Snow Leopard
for a fix for this and other BSM Leopard problems.
For a near-term work around, rotate your audit logs once after boot
up, and (at least for me) the audit trail terminates correctly after
$ sudo audit -n