Attachment 306284 Details for Bug 447631 – Audit log tail while restarting VNCServer service

Audit log tail while restarting VNCServer service

Terminal Saved Output.txt (text/plain), 16.25 KB, created by Brian Topping on 2008-05-21 17:21:32 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Brian Topping

Created: 2008-05-21 17:21:32 UTC

Size: 16.25 KB

patch

obsolete

>[1]+ tail -f /var/log/audit/audit.log &
>[root@blackrock /]# service vncserver restart
>Shutting down VNC server: 1:topping                        [  OK  ]
>type=USER_START msg=audit(1211390191.877:202): user pid=7022 uid=0 auid=0 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="topping" exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1211390191.879:203): user pid=7022 uid=0 auid=0 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="topping" exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_DISP msg=audit(1211390191.908:204): user pid=7022 uid=0 auid=0 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="topping" exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1211390191.908:205): user pid=7022 uid=0 auid=0 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="topping" exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>Starting VNC server: 1:topping type=USER_START msg=audit(1211390194.920:206): user pid=7035 uid=0 auid=0 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="topping" exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1211390194.920:207): user pid=7035 uid=0 auid=0 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="topping" exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>
>New 'blackrock.orb.org:1 (topping)' desktop is blackrock.orb.org:1
>
>Starting applications specified in /home/topping/.vnc/xstartup
>Log file is /home/topping/.vnc/blackrock.orb.org:1.log
>
>                                                           [  OK  ]
>[root@blackrock /]# type=CRED_DISP msg=audit(1211390198.018:208): user pid=7035 uid=0 auid=0 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="topping" exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_END msg=audit(1211390198.019:209): user pid=7035 uid=0 auid=0 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="topping" exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_AVC msg=audit(1211390198.064:210): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.72 spid=5725 tpid=7082 scontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390209.485:211): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.65 spid=5801 tpid=6880 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390223.122:212): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.73 spid=5801 tpid=7124 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390234.484:213): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.65 spid=5801 tpid=6880 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390248.180:214): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.freedesktop.ConsoleKit.Manager.GeneralError dest=:1.74 spid=5725 tpid=7130 scontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390259.487:215): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.65 spid=5801 tpid=6880 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390262.130:216): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.freedesktop.ConsoleKit.Manager.GeneralError dest=:1.75 spid=5725 tpid=7139 scontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390262.204:217): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.76 spid=5401 tpid=7154 scontext=system_u:system_r:bluetooth_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390262.247:218): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.freedesktop.ConsoleKit.Manager.GeneralError dest=:1.77 spid=5725 tpid=7162 scontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390262.271:219): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.79 spid=5801 tpid=7143 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390262.281:220): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.80 spid=5801 tpid=7172 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390262.328:221): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.81 spid=5801 tpid=7142 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390262.384:222): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.83 spid=5801 tpid=7182 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390262.815:223): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.freedesktop.ConsoleKit.Manager.GeneralError dest=:1.86 spid=5725 tpid=7220 scontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390276.144:224): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.freedesktop.ConsoleKit.Manager.GeneralError dest=:1.87 spid=5725 tpid=7230 scontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390284.487:225): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.65 spid=5801 tpid=6880 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390287.206:226): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.76 spid=5401 tpid=7154 scontext=system_u:system_r:bluetooth_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390287.269:227): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.79 spid=5801 tpid=7143 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390287.330:228): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.81 spid=5801 tpid=7142 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390287.393:229): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.83 spid=5801 tpid=7182 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390309.488:230): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.65 spid=5801 tpid=6880 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390312.395:231): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.83 spid=5801 tpid=7182 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390312.553:232): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.freedesktop.ConsoleKit.Manager.GeneralError dest=:1.89 spid=5725 tpid=7292 scontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390312.589:233): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.freedesktop.ConsoleKit.Manager.GeneralError dest=:1.90 spid=5725 tpid=7287 scontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1211390312.653:234): avc:  denied  { execheap } for  pid=7300 comm="mono" scontext=unconfined_u:system_r:unconfined_notrans_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=process
>type=SYSCALL msg=audit(1211390312.653:234): arch=c000003e syscall=10 success=no exit=-13 a0=27f1000 a1=1000 a2=7 a3=38b6d67a70 items=0 ppid=1 pid=7300 auid=0 uid=502 gid=502 euid=502 suid=502 fsuid=502 egid=502 sgid=502 fsgid=502 tty=(none) ses=2 comm="mono" exe="/usr/bin/mono" subj=unconfined_u:system_r:unconfined_notrans_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1211390312.830:235): auid=0 uid=502 gid=502 ses=2 subj=unconfined_u:system_r:unconfined_notrans_t:s0 pid=7300 comm="mono" sig=6
>type=USER_AVC msg=audit(1211390334.488:236): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.65 spid=5801 tpid=6880 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390337.397:237): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.83 spid=5801 tpid=7182 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390337.559:238): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.89 spid=5725 tpid=7292 scontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390359.489:239): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.65 spid=5801 tpid=6880 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390362.398:240): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.83 spid=5801 tpid=7182 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390362.600:241): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.89 spid=5725 tpid=7292 scontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390384.491:242): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.freedesktop.DBus.Error.UnknownMethod dest=:1.65 spid=5801 tpid=6880 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390387.399:243): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.83 spid=5801 tpid=7182 scontext=system_u:system_r:hald_t:s0 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AVC msg=audit(1211390387.602:244): user pid=2630 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_return dest=:1.89 spid=5725 tpid=7292 scontext=system_u:system_r:consolekit_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:unconfined_notrans_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'

Actions: View

Attachments on bug 447631: 306284