Attachment 155482 Details for Bug 241432 – Relevant part from audit log

Relevant part from audit log

selinux.txt (text/plain), 5.06 KB, created by Robert Scheck on 2007-05-25 22:36:25 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Robert Scheck

Created: 2007-05-25 22:36:25 UTC

Size: 5.06 KB

patch

obsolete

>type=AVC msg=audit(1180132051.245:188662): avc:  denied  { create } for  pid=4531 comm="saslauthd" scontext=user_u:system_r:saslauthd_t:s0 tcontext=user_u:system_r:saslauthd_t:s0 tclass=netlink_audit_socket
>type=SYSCALL msg=audit(1180132051.245:188662): arch=40000003 syscall=102 success=yes exit=8 a0=1 a1=bfaff770 a2=14fff4 a3=8000 items=0 ppid=4529 pid=4531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="saslauthd" exe="/usr/sbin/saslauthd" subj=user_u:system_r:saslauthd_t:s0 key=(null)
>type=AVC msg=audit(1180132051.245:188663): avc:  denied  { write } for  pid=4531 comm="saslauthd" scontext=user_u:system_r:saslauthd_t:s0 tcontext=user_u:system_r:saslauthd_t:s0 tclass=netlink_audit_socket
>type=AVC msg=audit(1180132051.245:188663): avc:  denied  { nlmsg_relay } for  pid=4531 comm="saslauthd" scontext=user_u:system_r:saslauthd_t:s0 tcontext=user_u:system_r:saslauthd_t:s0 tclass=netlink_audit_socket
>type=AVC msg=audit(1180132051.245:188663): avc:  denied  { audit_write } for  pid=4531 comm="saslauthd" capability=29 scontext=user_u:system_r:saslauthd_t:s0 tcontext=user_u:system_r:saslauthd_t:s0 tclass=capability
>type=USER_AUTH msg=audit(1180132051.245:188664): user pid=4531 uid=0 auid=500 subj=user_u:system_r:saslauthd_t:s0 msg='PAM: authentication acct=robert : exe="/usr/sbin/saslauthd" (hostname=?, addr=?, terminal=? res=success)'
>type=SYSCALL msg=audit(1180132051.245:188663): arch=40000003 syscall=102 success=yes exit=124 a0=b a1=bfaf49f0 a2=14fff4 a3=bfafb430 items=0 ppid=4529 pid=4531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="saslauthd" exe="/usr/sbin/saslauthd" subj=user_u:system_r:saslauthd_t:s0 key=(null)
>type=AVC msg=audit(1180132051.245:188665): avc:  denied  { read } for  pid=4531 comm="saslauthd" scontext=user_u:system_r:saslauthd_t:s0 tcontext=user_u:system_r:saslauthd_t:s0 tclass=netlink_audit_socket
>type=SYSCALL msg=audit(1180132051.245:188665): arch=40000003 syscall=102 success=yes exit=36 a0=c a1=bfaf49a0 a2=14fff4 a3=bfaf6d6c items=0 ppid=4529 pid=4531 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="saslauthd" exe="/usr/sbin/saslauthd" subj=user_u:system_r:saslauthd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1180132051.245:188666): user pid=4531 uid=0 auid=500 subj=user_u:system_r:saslauthd_t:s0 msg='PAM: accounting acct=robert : exe="/usr/sbin/saslauthd" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1180132071.216:188667): avc:  denied  { create } for  pid=4530 comm="saslauthd" scontext=user_u:system_r:saslauthd_t:s0 tcontext=user_u:system_r:saslauthd_t:s0 tclass=netlink_audit_socket
>type=SYSCALL msg=audit(1180132071.216:188667): arch=40000003 syscall=102 success=yes exit=8 a0=1 a1=bfaff770 a2=14fff4 a3=8000 items=0 ppid=4529 pid=4530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="saslauthd" exe="/usr/sbin/saslauthd" subj=user_u:system_r:saslauthd_t:s0 key=(null)
>type=AVC msg=audit(1180132071.216:188668): avc:  denied  { write } for  pid=4530 comm="saslauthd" scontext=user_u:system_r:saslauthd_t:s0 tcontext=user_u:system_r:saslauthd_t:s0 tclass=netlink_audit_socket
>type=AVC msg=audit(1180132071.216:188668): avc:  denied  { nlmsg_relay } for  pid=4530 comm="saslauthd" scontext=user_u:system_r:saslauthd_t:s0 tcontext=user_u:system_r:saslauthd_t:s0 tclass=netlink_audit_socket
>type=USER_AUTH msg=audit(1180132071.216:188669): user pid=4530 uid=0 auid=500 subj=user_u:system_r:saslauthd_t:s0 msg='PAM: authentication acct=robert : exe="/usr/sbin/saslauthd" (hostname=?, addr=?, terminal=? res=success)'
>type=SYSCALL msg=audit(1180132071.216:188668): arch=40000003 syscall=102 success=yes exit=124 a0=b a1=bfaf49f0 a2=14fff4 a3=bfafb430 items=0 ppid=4529 pid=4530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="saslauthd" exe="/usr/sbin/saslauthd" subj=user_u:system_r:saslauthd_t:s0 key=(null)
>type=AVC msg=audit(1180132071.216:188670): avc:  denied  { read } for  pid=4530 comm="saslauthd" scontext=user_u:system_r:saslauthd_t:s0 tcontext=user_u:system_r:saslauthd_t:s0 tclass=netlink_audit_socket
>type=SYSCALL msg=audit(1180132071.216:188670): arch=40000003 syscall=102 success=yes exit=36 a0=c a1=bfaf49a0 a2=14fff4 a3=bfaf6d6c items=0 ppid=4529 pid=4530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="saslauthd" exe="/usr/sbin/saslauthd" subj=user_u:system_r:saslauthd_t:s0 key=(null)
>type=USER_ACCT msg=audit(1180132071.216:188671): user pid=4530 uid=0 auid=500 subj=user_u:system_r:saslauthd_t:s0 msg='PAM: accounting acct=robert : exe="/usr/sbin/saslauthd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1180132108.318:188672): user pid=4529 uid=0 auid=500 subj=user_u:system_r:saslauthd_t:s0 msg='PAM: authentication acct=robert : exe="/usr/sbin/saslauthd" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1180132108.322:188673): user pid=4529 uid=0 auid=500 subj=user_u:system_r:saslauthd_t:s0 msg='PAM: accounting acct=robert : exe="/usr/sbin/saslauthd" (hostname=?, addr=?, terminal=? res=success)'

Actions: View

Attachments on bug 241432: 155482