Attachment 315625 Details for Bug 460873 – audit

audit

audit.log (text/plain), 3.75 KB, created by Marcela Mašláňová on 2008-09-03 09:11:28 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Marcela Mašláňová

Created: 2008-09-03 09:11:28 UTC

Size: 3.75 KB

patch

obsolete

>type=USER_ACCT msg=audit(1220430138.182:561): user pid=3275 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_crontab_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="marca" exe="/usr/bin/at" (hostname=?, addr=?, terminal=atd res=success)'
>type=LOGIN msg=audit(1220430138.183:562): login pid=3275 uid=0 old auid=500 new auid=500 old ses=36 new ses=75
>type=USER_START msg=audit(1220430138.185:563): user pid=3275 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_crontab_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="marca" exe="/usr/bin/at" (hostname=?, addr=?, terminal=atd res=success)'
>type=CRED_ACQ msg=audit(1220430138.185:564): user pid=3275 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_crontab_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="marca" exe="/usr/bin/at" (hostname=?, addr=?, terminal=atd res=success)'
>type=CRED_DISP msg=audit(1220430138.185:565): user pid=3275 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_crontab_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="marca" exe="/usr/bin/at" (hostname=?, addr=?, terminal=atd res=success)'
>type=USER_END msg=audit(1220430138.186:566): user pid=3275 uid=0 auid=500 subj=unconfined_u:unconfined_r:unconfined_crontab_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="marca"exe="/usr/bin/at" (hostname=?, addr=?, terminal=atd res=success)'
>type=USER_ACCT msg=audit(1220430144.751:567): user pid=3283 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="marca" exe="/usr/sbin/atd" (hostname=?, addr=?, terminal=atd res=success)'
>type=LOGIN msg=audit(1220430144.752:568): login pid=3283 uid=0 old auid=500 new auid=500 old ses=36 new ses=76
>type=USER_START msg=audit(1220430144.757:569): user pid=3283 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="marca" exe="/usr/sbin/atd" (hostname=?, addr=?, terminal=atd res=success)'
>type=CRED_ACQ msg=audit(1220430144.757:570): user pid=3283 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="marca" exe="/usr/sbin/atd" (hostname=?, addr=?, terminal=atd res=success)'
>type=CRED_DISP msg=audit(1220430144.781:571): user pid=3283 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="marca" exe="/usr/sbin/atd" (hostname=?, addr=?, terminal=atd res=success)'
>type=USER_END msg=audit(1220430144.781:572): user pid=3283 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="marca" exe="/usr/sbin/atd" (hostname=?, addr=?, terminal=atd res=success)'
>type=USER_ACCT msg=audit(1220430144.785:573): user pid=3283 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="marca" exe="/usr/sbin/atd" (hostname=?, addr=?, terminal=atd res=success)'
>type=LOGIN msg=audit(1220430144.786:574): login pid=3283 uid=0 old auid=500 new auid=500 old ses=76 new ses=77
>type=USER_START msg=audit(1220430144.787:575): user pid=3283 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="marca" exe="/usr/sbin/atd" (hostname=?, addr=?, terminal=atd res=success)'
>type=CRED_ACQ msg=audit(1220430144.787:576): user pid=3283 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="marca" exe="/usr/sbin/atd" (hostname=?, addr=?, terminal=atd res=success)'
>type=CRED_DISP msg=audit(1220430144.789:577): user pid=3283 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="marca" exe="/usr/sbin/atd" (hostname=?, addr=?, terminal=atd res=success)'
>type=USER_END msg=audit(1220430144.790:578): user pid=3283 uid=0 auid=500 subj=unconfined_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="marca" exe="/usr/sbin/atd" (hostname=?, addr=?, terminal=atd res=success)'
>

Actions: View

Attachments on bug 460873: 315625 | 315626 | 316674 | 316856