Attachment 674590 Details for Bug 878757 – audit.txt

audit.txt

audit.txt (text/plain), 2.90 KB, created by Jan Kaluža on 2013-01-08 08:28:12 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jan Kaluža

Created: 2013-01-08 08:28:12 UTC

Size: 2.90 KB

patch

obsolete

>type=CRED_DISP msg=audit(1357633324.534:61): user pid=2110 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1357633324.536:62): user pid=2110 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_ACCT msg=audit(1357633381.567:63): user pid=2313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=su
>ccess'
>type=CRED_ACQ msg=audit(1357633381.568:64): user pid=2313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=succes
>s'
>type=LOGIN msg=audit(1357633381.574:65): pid=2313 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7
>type=USER_START msg=audit(1357633381.576:66): user pid=2313 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=AVC msg=audit(1357633381.708:67): avc:  denied  { getattr } for  pid=2328 comm="logrotate" path="/root/test.log" dev=dm-0 ino=257542 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s
>0 tclass=file
>type=SYSCALL msg=audit(1357633381.708:67): arch=40000003 syscall=196 success=no exit=-13 a0=870d400 a1=bfee7ca0 a2=49eff4 a3=1 items=0 ppid=2326 pid=2328 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 com
>m="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1357633381.714:68): avc:  denied  { getattr } for  pid=2328 comm="logrotate" path="/root/test.log" dev=dm-0 ino=257542 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:admin_home_t:s
>0 tclass=file
>type=SYSCALL msg=audit(1357633381.714:68): arch=40000003 syscall=195 success=no exit=-13 a0=870d418 a1=bfee86b4 a2=49eff4 a3=bfee86b4 items=0 ppid=2326 pid=2328 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) se
>s=7 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null)
>type=CRED_DISP msg=audit(1357633383.947:69): user pid=2313 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1357633383.947:70): user pid=2313 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'

Actions: View

Attachments on bug 878757: 674590