Attachment 877001 Details for Bug 1079034 – Snippet from /var/log/audit/audit.log encompassing the commands in 'steps to reproduce'

Snippet from /var/log/audit/audit.log encompassing the commands in 'steps to reproduce'

audit.log (text/x-log), 5.63 KB, created by Gabriel Redner on 2014-03-20 19:37:01 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Gabriel Redner

Created: 2014-03-20 19:37:01 UTC

Size: 5.63 KB

patch

obsolete

>type=CRYPTO_KEY_USER msg=audit(1395343263.656:2033546): user pid=30116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1f:aa:32:33:cb:47:ad:4e:5c:99:64:d6:ee:10:67:87 direction=? spid=30116 suid=0  exe="/usr/sbin/sshd" hostname=? addr=129.64.54.25 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1395343263.656:2033547): user pid=30116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:81:3d:3d:06:35:f8:da:1f:d9:e3:8d:b0:87:a6:3a direction=? spid=30116 suid=0  exe="/usr/sbin/sshd" hostname=? addr=129.64.54.25 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1395343263.656:2033548): user pid=30115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=30116 suid=74 rport=44630 laddr=129.64.95.77 lport=22  exe="/usr/sbin/sshd" hostname=? addr=129.64.54.25 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1395343263.657:2033549): user pid=30115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=30116 suid=74 rport=44630 laddr=129.64.95.77 lport=22  exe="/usr/sbin/sshd" hostname=? addr=129.64.54.25 terminal=? res=success'
>type=USER_AUTH msg=audit(1395343263.739:2033550): user pid=30115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=44630 acct="gredner" exe="/usr/sbin/sshd" hostname=? addr=129.64.54.25 terminal=? res=success'
>type=USER_AUTH msg=audit(1395343263.739:2033551): user pid=30115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=7b:f7:01:63:52:da:d1:a5:9e:38:2f:ab:03:62:66:b3 rport=44630 acct="gredner" exe="/usr/sbin/sshd" hostname=? addr=129.64.54.25 terminal=? res=success'
>type=USER_ACCT msg=audit(1395343263.747:2033552): user pid=30115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="gredner" exe="/usr/sbin/sshd" hostname=scorpio.physics.brandeis.edu addr=129.64.54.25 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1395343263.747:2033553): user pid=30115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30116 suid=74 rport=44630 laddr=129.64.95.77 lport=22  exe="/usr/sbin/sshd" hostname=? addr=129.64.54.25 terminal=? res=success'
>type=USER_AUTH msg=audit(1395343263.748:2033554): user pid=30115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="gredner" exe="/usr/sbin/sshd" hostname=? addr=129.64.54.25 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1395343263.750:2033555): user pid=30115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="gredner" exe="/usr/sbin/sshd" hostname=scorpio.physics.brandeis.edu addr=129.64.54.25 terminal=ssh res=success'
>type=LOGIN msg=audit(1395343263.750:2033556): pid=30115 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old auid=4294967295 new auid=515 old ses=4294967295 new ses=27082
>type=USER_ROLE_CHANGE msg=audit(1395343263.839:2033557): user pid=30115 uid=0 auid=515 ses=27082 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=scorpio.physics.brandeis.edu addr=129.64.54.25 terminal=ssh res=success'
>type=USER_START msg=audit(1395343263.844:2033558): user pid=30115 uid=0 auid=515 ses=27082 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="gredner" exe="/usr/sbin/sshd" hostname=scorpio.physics.brandeis.edu addr=129.64.54.25 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1395343263.845:2033559): user pid=30118 uid=0 auid=515 ses=27082 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1f:aa:32:33:cb:47:ad:4e:5c:99:64:d6:ee:10:67:87 direction=? spid=30118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=129.64.54.25 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1395343263.845:2033560): user pid=30118 uid=0 auid=515 ses=27082 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:81:3d:3d:06:35:f8:da:1f:d9:e3:8d:b0:87:a6:3a direction=? spid=30118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=129.64.54.25 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1395343263.847:2033561): user pid=30115 uid=0 auid=515 ses=27082 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30115 suid=0 rport=44630 laddr=129.64.95.77 lport=22  exe="/usr/sbin/sshd" hostname=? addr=129.64.54.25 terminal=? res=success'
>type=CRED_ACQ msg=audit(1395343263.847:2033562): user pid=30118 uid=0 auid=515 ses=27082 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="gredner" exe="/usr/sbin/sshd" hostname=scorpio.physics.brandeis.edu addr=129.64.54.25 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1395343263.875:2033563): user pid=30115 uid=0 auid=515 ses=27082 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=515 exe="/usr/sbin/sshd" hostname=scorpio.physics.brandeis.edu addr=129.64.54.25 terminal=/dev/pts/7 res=success'
>type=USER_START msg=audit(1395343263.876:2033564): user pid=30115 uid=0 auid=515 ses=27082 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=515 exe="/usr/sbin/sshd" hostname=scorpio.physics.brandeis.edu addr=129.64.54.25 terminal=/dev/pts/7 res=success'

Actions: View

Attachments on bug 1079034: 877001 | 878147