Attachment 293215 Details for Bug 430595 – logs: sshd logout

logs: sshd logout

ssh_crypt_homedir-logout (text/plain), 3.09 KB, created by Kevin R. Page on 2008-01-28 22:38:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Kevin R. Page

Created: 2008-01-28 22:38:42 UTC

Size: 3.09 KB

patch

obsolete

>
>audit.log:
>
>type=CRED_DISP msg=audit(1201548277.041:226): user pid=5278 uid=0 auid=1976 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=krp exe="/usr/sbin/sshd" (hostname=82-68-41-195.dsl.in-addr.zen.co.uk, addr=82.68.41.195, terminal=ssh res=success)'
>type=AVC msg=audit(1201548277.042:227): avc:  denied  { execute } for  pid=5360 comm="sshd" name="pmvarrun" dev=dm-2 ino=3949781 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=file
>type=SYSCALL msg=audit(1201548277.042:227): arch=40000003 syscall=11 success=no exit=-13 a0=b7f9e0d0 a1=bfc5e7f8 a2=b7f9a3b8 a3=0 items=0 ppid=5278 pid=5360 auid=1976 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=1976 fsgid=0 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201548277.044:228): avc:  denied  { execute } for  pid=5361 comm="sshd" name="umount.crypt" dev=dm-0 ino=325126 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=file
>type=SYSCALL msg=audit(1201548277.044:228): arch=40000003 syscall=11 success=no exit=-13 a0=b7fa51c0 a1=bfc5e784 a2=b7f9a3b8 a3=b7ed568c items=0 ppid=5278 pid=5361 auid=1976 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=1976 fsgid=0 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1201548277.046:229): avc:  denied  { execute } for  pid=5362 comm="sshd" name="umount.crypt" dev=dm-0 ino=325126 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=file
>type=SYSCALL msg=audit(1201548277.046:229): arch=40000003 syscall=11 success=no exit=-13 a0=b7f8c560 a1=bfc5e784 a2=b7f9a3b8 a3=b7ed568c items=0 ppid=5278 pid=5362 auid=1976 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=1976 fsgid=0 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1201548277.149:230): user pid=5278 uid=0 auid=1976 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct=krp exe="/usr/sbin/sshd" (hostname=82-68-41-195.dsl.in-addr.zen.co.uk, addr=82.68.41.195, terminal=ssh res=success)'
>
>
>/var/log/messages:
>Jan 28 19:24:39 yaffle setroubleshoot: #012    SELinux is preventing /usr/sbin/sshd (sshd_t) "execute" to <Unknown> (bin_t).#012     For complete SELinux messages. run sealert -l 1a47833d-8491-426b-983c-09edd6b49679
>
>/var/log/secure:
>
>Jan 28 19:24:37 yaffle sshd[5278]: pam_unix(sshd:session): session closed for user krp
>Jan 28 19:24:37 yaffle sshd[5278]: pam_mount(pam_mount.c:332) error executing /usr/sbin/pmvarrun
>Jan 28 19:24:37 yaffle sshd[5278]: pam_mount(mount.c:482) Failed to execute child process "/sbin/umount.crypt" (Permission denied)
>Jan 28 19:24:37 yaffle sshd[5278]: pam_mount(pam_mount.c:558) unmount of /dev/yaffle_vg0/yaffle_lv_common_cryptmount failed
>Jan 28 19:24:37 yaffle sshd[5278]: pam_mount(mount.c:482) Failed to execute child process "/sbin/umount.crypt" (Permission denied)
>Jan 28 19:24:37 yaffle sshd[5278]: pam_mount(pam_mount.c:558) unmount of /dev/yaffle_vg0/yaffle_lv_krp_cryptmount failed
>

Actions: View

Attachments on bug 430595: 293213 | 293214 | 293215 | 293216 | 293217 | 293218 | 295953