Attachment 662327 Details for Bug 886453 – audit.log

audit.log

file_886453.txt (text/plain), 5.19 KB, created by Francesco Frassinelli (frafra) on 2012-12-12 13:06:44 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Francesco Frassinelli (frafra)

Created: 2012-12-12 13:06:44 UTC

Size: 5.19 KB

patch

obsolete

>type=DAEMON_START msg=audit(1355317414.945:4951): auditd start, ver=2.2.1 format=raw kernel=3.6.10-4.fc18.x86_64 auid=4294967295 pid=2363 subj=system_u:system_r:auditd_t:s0 res=success
>type=CONFIG_CHANGE msg=audit(1355317414.952:34): audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=SERVICE_START msg=audit(1355317414.963:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="auditd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1355317418.588:36): pid=2339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="xguest" exe="/usr/bin/kdm" hostname=? addr=? terminal=:1 res=success'
>type=USER_ACCT msg=audit(1355317418.594:37): pid=2339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="xguest" exe="/usr/bin/kdm" hostname=? addr=? terminal=:1 res=success'
>type=CRED_ACQ msg=audit(1355317418.598:38): pid=2339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="xguest" exe="/usr/bin/kdm" hostname=? addr=? terminal=:1 res=success'
>type=LOGIN msg=audit(1355317418.598:39): login pid=2339 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=4
>type=USER_ROLE_CHANGE msg=audit(1355317418.610:40): pid=2339 uid=0 auid=1001 ses=4 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=xguest_u:xguest_r:xguest_t:s0 selected-context=xguest_u:xguest_r:xguest_t:s0 exe="/usr/bin/kdm" hostname=? addr=? terminal=:1 res=success'
>type=USER_START msg=audit(1355317418.709:41): pid=2339 uid=0 auid=1001 ses=4 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="xguest" exe="/usr/bin/kdm" hostname=? addr=? terminal=:1 res=success'
>type=AVC msg=audit(1355317427.537:42): avc:  denied  { read } for  pid=2616 comm="ksysguardd" name="mdstat" dev="proc" ino=4026531970 scontext=xguest_u:xguest_r:xguest_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file
>type=SYSCALL msg=audit(1355317427.537:42): arch=c000003e syscall=2 success=no exit=-13 a0=41f665 a1=0 a2=9b7760 a3=10 items=0 ppid=2606 pid=2616 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4 comm="ksysguardd" exe="/usr/bin/ksysguardd" subj=xguest_u:xguest_r:xguest_t:s0 key=(null)
>type=USER_AVC msg=audit(1355317429.008:43): pid=563 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.ModemManager member=EnumerateDevices dest=org.freedesktop.ModemManager spid=2486 tpid=673 scontext=xguest_u:xguest_r:xguest_t:s0 tcontext=system_u:system_r:modemmanager_t:s0-s0:c0.c1023 tclass=dbus  exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'
>type=AVC msg=audit(1355317429.382:44): avc:  denied  { write } for  pid=2634 comm="gnome-keyring-d" name="share" dev="tmpfs" ino=39239 scontext=xguest_u:xguest_r:xguest_gkeyringd_t:s0 tcontext=xguest_u:object_r:data_home_t:s0 tclass=dir
>type=SYSCALL msg=audit(1355317429.382:44): arch=c000003e syscall=83 success=no exit=-13 a0=270f300 a1=1c0 a2=270f331 a3=7fff83bda590 items=0 ppid=2633 pid=2634 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=xguest_u:xguest_r:xguest_gkeyringd_t:s0 key=(null)
>type=AVC msg=audit(1355317429.393:45): avc:  denied  { write } for  pid=2634 comm="gnome-keyring-d" name="share" dev="tmpfs" ino=39239 scontext=xguest_u:xguest_r:xguest_gkeyringd_t:s0 tcontext=xguest_u:object_r:data_home_t:s0 tclass=dir
>type=SYSCALL msg=audit(1355317429.393:45): arch=c000003e syscall=83 success=no exit=-13 a0=27156a0 a1=1c0 a2=27156d1 a3=636f6c2e2f747365 items=0 ppid=2633 pid=2634 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=xguest_u:xguest_r:xguest_gkeyringd_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1355317467.640:46): auid=1001 uid=1001 gid=1001 ses=4 subj=xguest_u:xguest_r:xguest_t:s0 pid=2689 comm="nepomukservices" reason="memory violation" sig=11
>type=USER_END msg=audit(1355317467.740:47): pid=2339 uid=0 auid=1001 ses=4 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="xguest" exe="/usr/bin/kdm" hostname=? addr=? terminal=:1 res=success'
>type=CRED_DISP msg=audit(1355317467.740:48): pid=2339 uid=0 auid=1001 ses=4 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="xguest" exe="/usr/bin/kdm" hostname=? addr=? terminal=:1 res=success'
>type=AVC msg=audit(1355317467.860:49): avc:  denied  { unlink } for  pid=558 comm="systemd-logind" name="control" dev="tmpfs" ino=39592 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=xguest_u:object_r:gkeyringd_tmp_t:s0 tclass=sock_file
>type=AVC msg=audit(1355317467.860:50): avc:  denied  { unlink } for  pid=558 comm="systemd-logind" name="control" dev="tmpfs" ino=28934 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=xguest_u:object_r:gkeyringd_tmp_t:s0 tclass=sock_file

Actions: View

Attachments on bug 886453: 662327