Attachment 697282 Details for Bug 909648 – Audit Log

Audit Log

audit.log (text/x-log), 2.33 KB, created by Rob on 2013-02-14 16:29:24 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Rob

Created: 2013-02-14 16:29:24 UTC

Size: 2.33 KB

patch

obsolete

>[root@fed18 audit]# cat audit.log | grep guest
>type=ROLE_ASSIGN msg=audit(1360857147.333:336): pid=1800 uid=0 auid=1000 ses=2 subj=unconfined_u:system_r:semanage_t:s0-s0:c0.c1023 msg='op=seuser id=0 old-seuser=xguest_u old-role=xguest_r old-range=s0 new-seuser=xguest_u new-role=xguest_r new-range=s0 exe=/sbin/semanage hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1360857151.687:337): pid=1807 uid=0 auid=1000 ses=2 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="xguest" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1360858085.733:318): pid=1234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="xguest" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success'
>type=USER_ACCT msg=audit(1360858085.738:319): pid=1234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="xguest" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success'
>type=CRED_ACQ msg=audit(1360858085.741:320): pid=1234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="xguest" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success'
>type=USER_ROLE_CHANGE msg=audit(1360858085.845:322): pid=1234 uid=0 auid=1001 ses=2 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=xguest_u:xguest_r:xguest_t:s0 selected-context=xguest_u:xguest_r:xguest_t:s0 exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success'
>type=USER_START msg=audit(1360858086.139:323): pid=1234 uid=0 auid=1001 ses=2 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="xguest" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success'
>type=USER_END msg=audit(1360858098.876:329): pid=1234 uid=0 auid=1001 ses=2 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="xguest" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success'
>type=CRED_DISP msg=audit(1360858098.876:331): pid=1234 uid=0 auid=1001 ses=2 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="xguest" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success'
>

Actions: View

Attachments on bug 909648: 697281 | 697282