Attachment 709069 Details for Bug 920738 – audit log (enforcing)

audit log (enforcing)

audit.log.enforcing (text/plain), 3.85 KB, created by Eric Harney on 2013-03-12 16:27:05 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Eric Harney

Created: 2013-03-12 16:27:05 UTC

Size: 3.85 KB

patch

obsolete

>type=DAEMON_START msg=audit(1363105449.391:6070): auditd start, ver=2.2 format=raw kernel=2.6.32-343.el6.x86_64 auid=0 pid=11487 subj=unconfined_u:system_r:auditd_t:s0 res=success
>type=CONFIG_CHANGE msg=audit(1363105449.501:2235): audit_backlog_limit=320 old=320 auid=0 ses=2 subj=unconfined_u:system_r:auditctl_t:s0 res=1
>type=USER_CMD msg=audit(1363105456.049:2236): user pid=11507 uid=165 auid=0 ses=2 subj=unconfined_u:system_r:initrc_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662073746174202F7661722F6C69622F63696E6465722F6D6E742F39343038303133383234333036303034323337 terminal=? res=success'
>type=CRED_ACQ msg=audit(1363105456.051:2237): user pid=11507 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1363105456.051:2238): user pid=11507 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1363105456.121:2239): user pid=11507 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1363105456.121:2240): user pid=11507 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1363105456.131:2241): user pid=11510 uid=165 auid=0 ses=2 subj=unconfined_u:system_r:initrc_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206D6F756E74202D7420676C7573746572667320676C75737465722E6C6F63616C3A2F74657374766F6C202F7661722F6C69622F63696E6465722F6D6E742F39343038303133383234333036303034323337 terminal=? res=success'
>type=CRED_ACQ msg=audit(1363105456.131:2242): user pid=11510 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1363105456.131:2243): user pid=11510 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1363105456.222:2244): avc:  denied  { execute } for  pid=11584 comm="mount.glusterfs" name="glusterfsd" dev=vda3 ino=19781 scontext=unconfined_u:system_r:mount_t:s0 tcontext=system_u:object_r:glusterd_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1363105456.222:2244): arch=c000003e syscall=59 success=no exit=-13 a0=938970 a1=92f370 a2=937020 a3=7fff120c5860 items=0 ppid=11513 pid=11584 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="mount.glusterfs" exe="/bin/bash" subj=unconfined_u:system_r:mount_t:s0 key=(null)
>type=AVC msg=audit(1363105456.222:2245): avc:  denied  { execute } for  pid=11584 comm="mount.glusterfs" name="glusterfsd" dev=vda3 ino=19781 scontext=unconfined_u:system_r:mount_t:s0 tcontext=system_u:object_r:glusterd_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1363105456.222:2245): arch=c000003e syscall=21 success=no exit=-13 a0=938970 a1=1 a2=0 a3=7fff120c5860 items=0 ppid=11513 pid=11584 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="mount.glusterfs" exe="/bin/bash" subj=unconfined_u:system_r:mount_t:s0 key=(null)
>type=USER_END msg=audit(1363105456.232:2246): user pid=11510 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1363105456.232:2247): user pid=11510 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'

Actions: View

Attachments on bug 920738: 709068 | 709069