Attachment 157203 Details for Bug 244534 – auditd messages logged

auditd messages logged

audit-dovecot-unix_update.txt (text/plain), 1.11 KB, created by Tomasz Ostrowski on 2007-06-16 19:55:34 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tomasz Ostrowski

Created: 2007-06-16 19:55:34 UTC

Size: 1.11 KB

patch

obsolete

>type=USER_AUTH msg=audit(1182022478.064:136): user pid=2640 uid=0 auid=500 subj=user_u:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=test : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:62.89.72.210, addr=::ffff:62.89.72.210, terminal=dovecot res=success)'
>type=AVC msg=audit(1182022478.064:137): avc:  denied  { execute } for  pid=2642 comm="dovecot-auth" name="unix_update" dev=sda1 ino=819255 scontext=user_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:updpwd_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1182022478.064:137): arch=40000003 syscall=11 success=no exit=-13 a0=9b48b8 a1=bff4917c a2=9b6408 a3=400 items=0 ppid=2640 pid=2642 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dovecot-auth" exe="/usr/libexec/dovecot/dovecot-auth" subj=user_u:system_r:dovecot_auth_t:s0 key=(null)
>type=USER_ACCT msg=audit(1182022478.064:138): user pid=2640 uid=0 auid=500 subj=user_u:system_r:dovecot_auth_t:s0 msg='PAM: accounting acct=test : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=::ffff:62.89.72.210, addr=::ffff:62.89.72.210, terminal=dovecot res=failed)'

Actions: View

Attachments on bug 244534: 157203