Attachment 263451 Details for Bug 381811 – audit.log for normal user (home on nfs) logging in, selinux permissive

audit.log for normal user (home on nfs) logging in, selinux permissive

audit-user-perm.log (text/plain), 4.37 KB, created by Tomasz Kepczynski on 2007-11-19 12:46:55 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tomasz Kepczynski

Created: 2007-11-19 12:46:55 UTC

Size: 4.37 KB

patch

obsolete

>type=DAEMON_START msg=audit(1195476274.263:2719): auditd start, ver=1.6.2, format=raw, auid=43270 pid=9124 res=success, auditd pid=9124
>type=CONFIG_CHANGE msg=audit(1195476274.363:324): audit_enabled=1 old=1 by auid=43270 subj=unconfined_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1195476274.363:325): audit_enabled=1 old=1 by auid=43270 res=1
>type=CONFIG_CHANGE msg=audit(1195476274.367:326): audit_backlog_limit=320 old=320 by auid=43270 subj=unconfined_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1195476274.367:327): audit_backlog_limit=320 old=320 by auid=43270 res=1
>type=USER_AUTH msg=audit(1195476282.835:328): user pid=9090 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=tkepczyn exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1195476282.836:329): user pid=9090 uid=0 auid=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=tkepczyn exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=AVC msg=audit(1195476282.915:330): avc:  denied  { execute } for  pid=9137 comm="login" name="ssh-agent" dev=dm-0 ino=1266862 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ssh_agent_exec_t:s0 tclass=file
>type=AVC msg=audit(1195476282.915:330): avc:  denied  { execute_no_trans } for  pid=9137 comm="login" path="/usr/bin/ssh-agent" dev=dm-0 ino=1266862 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ssh_agent_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1195476282.915:330): arch=c000003e syscall=59 success=yes exit=0 a0=2aaaab347b9a a1=7fff2fd73230 a2=7fff2fd73290 a3=2aaaaaadf1c0 items=0 ppid=9090 pid=9137 auid=4294967295 uid=43270 gid=0 euid=43270 suid=43270 fsuid=43270 egid=99 sgid=99 fsgid=99 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1195476282.919:331): avc:  denied  { create } for  pid=9137 comm="ssh-agent" name="agent.9137" scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1195476282.919:331): arch=c000003e syscall=49 success=yes exit=0 a0=3 a1=7fff386fd3f0 a2=6e a3=0 items=0 ppid=9090 pid=9137 auid=4294967295 uid=43270 gid=0 euid=43270 suid=43270 fsuid=43270 egid=0 sgid=99 fsgid=0 tty=tty1 comm="ssh-agent" exe="/usr/bin/ssh-agent" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1195476282.920:332): avc:  denied  { write } for  pid=9090 comm="login" name="agent.9137" dev=tmpfs ino=28458 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:local_login_tmp_t:s0 tclass=sock_file
>type=SYSCALL msg=audit(1195476282.920:332): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fff2fd73100 a2=6e a3=0 items=0 ppid=1 pid=9090 auid=4294967295 uid=0 gid=0 euid=43270 suid=0 fsuid=43270 egid=32602 sgid=0 fsgid=32602 tty=tty1 comm="login" exe="/bin/login" subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null)
>type=LOGIN msg=audit(1195476282.925:333): login pid=9090 uid=0 old auid=4294967295 new auid=43270
>type=USER_ROLE_CHANGE msg=audit(1195476282.936:334): user pid=9090 uid=0 auid=43270 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:system_r:unconfined_t:s0 selected-context=unconfined_u:system_r:unconfined_t:s0: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_START msg=audit(1195476283.041:335): user pid=9090 uid=0 auid=43270 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=tkepczyn exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=CRED_ACQ msg=audit(1195476283.042:336): user pid=9090 uid=0 auid=43270 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=tkepczyn exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_LOGIN msg=audit(1195476283.044:337): user pid=9090 uid=0 auid=43270 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='uid=43270: exe="/bin/login" (hostname=?, addr=?, terminal=tty1 res=success)'
>type=USER_ACCT msg=audit(1195476301.336:338): user pid=9194 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=root exe="/usr/sbin/crond" (hostname=?, addr=?, terminal=cron res=success)'

Actions: View

Attachments on bug 381811: 259561 | 259571 | 259581 | 259591 | 260821 | 260831 | 263441 | 263451 | 266701 | 266711 | 266721 | 266731