Attachment 1006332 Details for Bug 1205693 – audit.log

audit.log

audit.log (text/plain), 17.83 KB, created by Lukáš Hellebrandt on 2015-03-25 13:32:02 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Lukáš Hellebrandt

Created: 2015-03-25 13:32:02 UTC

Size: 17.83 KB

patch

obsolete

>type=USER_START msg=audit(1427289086.075:536): user pid=26514 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="foreman" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289086.076:537): user pid=26514 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="foreman" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_DISP msg=audit(1427289105.034:538): user pid=26514 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="foreman" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289105.037:539): user pid=26514 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="foreman" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1427289118.408:540): user pid=26617 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:authentication acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_ACCT msg=audit(1427289118.408:541): user pid=26617 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:accounting acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289118.412:542): user pid=26617 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289118.412:543): user pid=26617 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=AVC msg=audit(1427289120.765:544): avc:  denied  { read } for  pid=26618 comm="celery" name="reserved_resource_worker-0.pid" dev=dm-0 ino=2108688 scontext=unconfined_u:system_r:celery_t:s0 tcontext=unconfined_u:object_r:initrc_var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1427289120.765:544): arch=c000003e syscall=2 success=no exit=-13 a0=1b42ff0 a1=0 a2=1b6 a3=0 items=0 ppid=26617 pid=26618 auid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=1 comm="celery" exe="/usr/bin/python" subj=unconfined_u:system_r:celery_t:s0 key=(null)
>type=CRED_DISP msg=audit(1427289120.792:545): user pid=26617 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289120.793:546): user pid=26617 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1427289120.832:547): user pid=26657 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:authentication acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_ACCT msg=audit(1427289120.833:548): user pid=26657 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:accounting acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289120.835:549): user pid=26657 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289120.835:550): user pid=26657 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=AVC msg=audit(1427289123.374:551): avc:  denied  { read } for  pid=26658 comm="celery" name="resource_manager.pid" dev=dm-0 ino=2108659 scontext=unconfined_u:system_r:celery_t:s0 tcontext=unconfined_u:object_r:initrc_var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1427289123.374:551): arch=c000003e syscall=2 success=no exit=-13 a0=ee9420 a1=0 a2=1b6 a3=0 items=0 ppid=26657 pid=26658 auid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=1 comm="celery" exe="/usr/bin/python" subj=unconfined_u:system_r:celery_t:s0 key=(null)
>type=CRED_DISP msg=audit(1427289123.400:552): user pid=26657 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289123.401:553): user pid=26657 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289141.295:554): user pid=26930 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="tomcat" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289141.295:555): user pid=26930 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="tomcat" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_DISP msg=audit(1427289177.475:556): user pid=26930 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="tomcat" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289177.480:557): user pid=26930 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="tomcat" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289217.948:558): user pid=27191 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289217.948:559): user pid=27191 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_DISP msg=audit(1427289217.953:560): user pid=27191 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289217.953:561): user pid=27191 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289226.393:562): user pid=27236 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289226.394:563): user pid=27236 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_DISP msg=audit(1427289226.396:564): user pid=27236 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289226.397:565): user pid=27236 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289226.402:566): user pid=27240 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289226.402:567): user pid=27240 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=AVC msg=audit(1427289226.404:568): avc:  denied  { read } for  pid=27242 comm="qpidd" path="/etc/rc.d/init.d/qpidd" dev=dm-0 ino=1177603 scontext=unconfined_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:qpidd_initrc_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1427289226.404:568): arch=c000003e syscall=59 success=yes exit=0 a0=ca28c0 a1=ca1e00 a2=ca0c50 a3=40 items=0 ppid=27241 pid=27242 auid=0 uid=498 gid=498 euid=498 suid=498 fsuid=498 egid=498 sgid=498 fsgid=498 tty=(none) ses=1 comm="qpidd" exe="/usr/sbin/qpidd" subj=unconfined_u:system_r:qpidd_t:s0 key=(null)
>type=CRED_DISP msg=audit(1427289235.474:569): user pid=27240 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289235.474:570): user pid=27240 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=AVC msg=audit(1427289235.478:571): avc:  denied  { read } for  pid=27342 comm="restorecon" path="/etc/rc.d/init.d/qpidd" dev=dm-0 ino=1177603 scontext=unconfined_u:system_r:setfiles_t:s0 tcontext=system_u:object_r:qpidd_initrc_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1427289235.478:571): arch=c000003e syscall=59 success=yes exit=0 a0=11cbaf0 a1=11cb580 a2=1193d60 a3=18 items=0 ppid=27232 pid=27342 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=1 comm="restorecon" exe="/sbin/setfiles" subj=unconfined_u:system_r:setfiles_t:s0 key=(null)
>type=USER_START msg=audit(1427289235.621:572): user pid=27343 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289235.621:573): user pid=27343 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=AVC msg=audit(1427289238.642:574): avc:  denied  { read } for  pid=27367 comm="qpidd" path="/etc/rc.d/init.d/qpidd" dev=dm-0 ino=1177603 scontext=unconfined_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:qpidd_initrc_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1427289238.642:574): arch=c000003e syscall=59 success=yes exit=0 a0=25191d0 a1=25225f0 a2=2524180 a3=28 items=0 ppid=27344 pid=27367 auid=0 uid=498 gid=498 euid=498 suid=498 fsuid=498 egid=498 sgid=498 fsgid=498 tty=(none) ses=1 comm="qpidd" exe="/usr/sbin/qpidd" subj=unconfined_u:system_r:qpidd_t:s0 key=(null)
>type=CRED_DISP msg=audit(1427289239.019:575): user pid=27343 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289239.019:576): user pid=27343 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="qpidd" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289239.621:577): user pid=27413 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="tomcat" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289239.621:578): user pid=27413 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="tomcat" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_DISP msg=audit(1427289239.716:579): user pid=27413 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="tomcat" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289239.716:580): user pid=27413 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="tomcat" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289393.193:581): user pid=28247 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="mongodb" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289393.196:582): user pid=28247 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="mongodb" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_DISP msg=audit(1427289399.840:583): user pid=28247 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="mongodb" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289399.840:584): user pid=28247 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="mongodb" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289405.016:585): user pid=28281 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="elasticsearch" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289405.016:586): user pid=28281 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="elasticsearch" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_DISP msg=audit(1427289405.028:587): user pid=28281 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="elasticsearch" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289405.028:588): user pid=28281 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="elasticsearch" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1427289420.797:589): user pid=28374 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:authentication acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_ACCT msg=audit(1427289420.798:590): user pid=28374 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:accounting acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289420.803:591): user pid=28374 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289420.803:592): user pid=28374 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_DISP msg=audit(1427289422.647:593): user pid=28374 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289422.647:594): user pid=28374 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1427289422.924:595): user pid=28460 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:authentication acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_ACCT msg=audit(1427289422.924:596): user pid=28460 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:accounting acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289422.932:597): user pid=28460 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289422.932:598): user pid=28460 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_DISP msg=audit(1427289430.862:599): user pid=28460 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289430.863:600): user pid=28460 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_AUTH msg=audit(1427289430.903:601): user pid=28523 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:authentication acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_ACCT msg=audit(1427289430.903:602): user pid=28523 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:accounting acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289430.909:603): user pid=28523 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289430.909:604): user pid=28523 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_DISP msg=audit(1427289431.185:605): user pid=28523 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289431.185:606): user pid=28523 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="apache" exe="/bin/su" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_START msg=audit(1427289436.409:607): user pid=28620 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="foreman" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_ACQ msg=audit(1427289436.409:608): user pid=28620 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="foreman" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=CRED_DISP msg=audit(1427289523.727:609): user pid=28620 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="foreman" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'
>type=USER_END msg=audit(1427289523.742:610): user pid=28620 uid=0 auid=0 ses=1 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="foreman" exe="/sbin/runuser" hostname=? addr=? terminal=pts/1 res=success'

Actions: View

Attachments on bug 1205693: 1006327 | 1006328 | 1006332 | 1006333