Attachment 308394 Details for Bug 450027 – audit.log

audit.log

audit.log (text/plain), 15.04 KB, created by Peter Dawes on 2008-06-04 20:19:11 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Peter Dawes

Created: 2008-06-04 20:19:11 UTC

Size: 15.04 KB

patch

obsolete

>type=AVC msg=audit(1212608535.856:292): avc:  denied  { siginh } for  pid=2675 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1212608535.856:292): avc:  denied  { rlimitinh } for  pid=2675 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1212608535.856:292): avc:  denied  { noatsecure } for  pid=2675 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1212608535.856:292): arch=c000003e syscall=59 success=yes exit=0 a0=d7cc36b8 a1=7fff1dd16630 a2=d7ec9748 a3=26eaa70 items=0 ppid=2673 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212608535.858:293): avc:  denied  { getattr } for  pid=2675 comm="unix_chkpwd" name="/" dev=selinuxfs ino=1 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1212608535.858:293): arch=c000003e syscall=137 success=no exit=-13 a0=57a340 a1=7fffd9dacad0 a2=1000 a3=7fffd9dac840 items=0 ppid=2673 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212608535.859:294): avc:  denied  { search } for  pid=2675 comm="unix_chkpwd" name="/" dev=selinuxfs ino=1 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=dir
>type=SYSCALL msg=audit(1212608535.859:294): arch=c000003e syscall=4 success=no exit=-13 a0=7fffd9dabaa0 a1=7fffd9daba10 a2=7fffd9daba10 a3=7fffd9dab790 items=0 ppid=2673 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212608535.859:295): avc:  denied  { search } for  pid=2675 comm="unix_chkpwd" name="/" dev=selinuxfs ino=1 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=dir
>type=SYSCALL msg=audit(1212608535.859:295): arch=c000003e syscall=2 success=no exit=-13 a0=7fffd9daba70 a1=0 a2=c a3=7fffd9dab7f0 items=0 ppid=2673 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212608535.860:296): avc:  denied  { name_bind } for  pid=2675 comm="unix_chkpwd" src=731 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1212608535.860:296): arch=c000003e syscall=49 success=no exit=-13 a0=5 a1=7fffd9dac520 a2=10 a3=d02a70 items=0 ppid=2673 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212608535.861:297): avc:  denied  { name_bind } for  pid=2675 comm="unix_chkpwd" src=732 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1212608535.861:297): arch=c000003e syscall=49 success=no exit=-13 a0=5 a1=7fffd9dac560 a2=10 a3=d02a70 items=0 ppid=2673 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1212608538.452:298): user pid=2673 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="peterd" exe="/usr/sbin/sshd" (hostname=its-peterd.math.uwo.ca, addr=129.100.75.28, terminal=ssh res=failed)'
>type=USER_LOGIN msg=audit(1212608538.452:299): user pid=2673 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="peterd": exe="/usr/sbin/sshd" (hostname=?, addr=129.100.75.28, terminal=sshd res=failed)'
>type=AVC msg=audit(1212609095.221:300): avc:  denied  { siginh } for  pid=2678 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1212609095.221:300): avc:  denied  { rlimitinh } for  pid=2678 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1212609095.221:300): avc:  denied  { noatsecure } for  pid=2678 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1212609095.221:300): arch=c000003e syscall=59 success=yes exit=0 a0=376d6b8 a1=7fffdad60680 a2=3973748 a3=26d4a70 items=0 ppid=2676 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212609095.223:301): avc:  denied  { getattr } for  pid=2678 comm="unix_chkpwd" name="/" dev=selinuxfs ino=1 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1212609095.223:301): arch=c000003e syscall=137 success=no exit=-13 a0=57a340 a1=7fff266a93d0 a2=1000 a3=7fff266a9140 items=0 ppid=2676 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212609095.223:302): avc:  denied  { search } for  pid=2678 comm="unix_chkpwd" name="/" dev=selinuxfs ino=1 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=dir
>type=SYSCALL msg=audit(1212609095.223:302): arch=c000003e syscall=4 success=no exit=-13 a0=7fff266a83a0 a1=7fff266a8310 a2=7fff266a8310 a3=7fff266a8090 items=0 ppid=2676 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212609095.224:303): avc:  denied  { search } for  pid=2678 comm="unix_chkpwd" name="/" dev=selinuxfs ino=1 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=dir
>type=SYSCALL msg=audit(1212609095.224:303): arch=c000003e syscall=2 success=no exit=-13 a0=7fff266a8370 a1=0 a2=c a3=7fff266a80f0 items=0 ppid=2676 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1212609095.238:304): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" (hostname=its-peterd.math.uwo.ca, addr=129.100.75.28, terminal=ssh res=success)'
>type=AVC msg=audit(1212609095.239:305): avc:  denied  { siginh } for  pid=2679 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1212609095.239:305): avc:  denied  { rlimitinh } for  pid=2679 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1212609095.239:305): avc:  denied  { noatsecure } for  pid=2679 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1212609095.239:305): arch=c000003e syscall=59 success=yes exit=0 a0=376d6b8 a1=7fffdad60690 a2=396f730 a3=26d4a70 items=0 ppid=2676 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212609095.241:306): avc:  denied  { getattr } for  pid=2679 comm="unix_chkpwd" name="/" dev=selinuxfs ino=1 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1212609095.241:306): arch=c000003e syscall=137 success=no exit=-13 a0=57a340 a1=7fff6ea5d780 a2=1000 a3=7fff6ea5d4f0 items=0 ppid=2676 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212609095.241:307): avc:  denied  { search } for  pid=2679 comm="unix_chkpwd" name="/" dev=selinuxfs ino=1 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=dir
>type=SYSCALL msg=audit(1212609095.241:307): arch=c000003e syscall=4 success=no exit=-13 a0=7fff6ea5c750 a1=7fff6ea5c6c0 a2=7fff6ea5c6c0 a3=7fff6ea5c440 items=0 ppid=2676 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212609095.241:308): avc:  denied  { search } for  pid=2679 comm="unix_chkpwd" name="/" dev=selinuxfs ino=1 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=dir
>type=SYSCALL msg=audit(1212609095.241:308): arch=c000003e syscall=2 success=no exit=-13 a0=7fff6ea5c720 a1=0 a2=c a3=7fff6ea5c4a0 items=0 ppid=2676 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=USER_ACCT msg=audit(1212609095.244:309): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" (hostname=its-peterd.math.uwo.ca, addr=129.100.75.28, terminal=ssh res=success)'
>type=CRED_ACQ msg=audit(1212609095.273:310): user pid=2676 uid=0 auid=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" (hostname=its-peterd.math.uwo.ca, addr=129.100.75.28, terminal=ssh res=success)'
>type=LOGIN msg=audit(1212609095.274:311): login pid=2676 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2
>type=USER_START msg=audit(1212609095.276:312): user pid=2676 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" (hostname=its-peterd.math.uwo.ca, addr=129.100.75.28, terminal=ssh res=success)'
>type=USER_LOGIN msg=audit(1212609095.287:313): user pid=2681 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=0: exe="/usr/sbin/sshd" (hostname=its-peterd.math.uwo.ca, addr=129.100.75.28, terminal=/dev/pts/1 res=success)'
>type=CRED_REFR msg=audit(1212609095.299:314): user pid=2681 uid=0 auid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" (hostname=its-peterd.math.uwo.ca, addr=129.100.75.28, terminal=ssh res=success)'
>type=AVC msg=audit(1212609095.300:315): avc:  denied  { siginh } for  pid=2682 comm="sh" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1212609095.300:315): avc:  denied  { noatsecure } for  pid=2682 comm="sh" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1212609095.300:315): arch=c000003e syscall=59 success=yes exit=0 a0=24a2e1a a1=7fffdad5df20 a2=7ff8d369cf00 a3=314f210 items=0 ppid=2681 pid=2682 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=2 comm="sh" exe="/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212609095.306:316): avc:  denied  { siginh } for  pid=2681 comm="bash" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1212609095.306:316): avc:  denied  { noatsecure } for  pid=2681 comm="bash" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1212609095.306:316): arch=c000003e syscall=59 success=yes exit=0 a0=7ff8d36a4700 a1=7fffdad601b0 a2=7ff8d369cf00 a3=7fffdad5fe40 items=0 ppid=2676 pid=2681 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=2 comm="bash" exe="/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212609661.120:317): avc:  denied  { getattr } for  pid=2729 comm="unix_chkpwd" name="/" dev=selinuxfs ino=1 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1212609661.120:317): arch=c000003e syscall=137 success=no exit=-13 a0=57a340 a1=7fffb877e4a0 a2=1000 a3=7fffb877e210 items=0 ppid=2728 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212609661.120:318): avc:  denied  { search } for  pid=2729 comm="unix_chkpwd" name="/" dev=selinuxfs ino=1 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=dir
>type=SYSCALL msg=audit(1212609661.120:318): arch=c000003e syscall=4 success=no exit=-13 a0=7fffb877d470 a1=7fffb877d3e0 a2=7fffb877d3e0 a3=7fffb877d160 items=0 ppid=2728 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1212609661.120:319): avc:  denied  { search } for  pid=2729 comm="unix_chkpwd" name="/" dev=selinuxfs ino=1 scontext=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=dir
>type=SYSCALL msg=audit(1212609661.120:319): arch=c000003e syscall=2 success=no exit=-13 a0=7fffb877d440 a1=0 a2=c a3=7fffb877d1c0 items=0 ppid=2728 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:system_chkpwd_t:s0-s0:c0.c1023 key=(null)
>

Actions: View

Attachments on bug 450027: 308394 | 308492 | 308493 | 308867 | 309501 | 310842 | 312933 | 312934 | 325257