Attachment 922606 Details for Bug 1102881 – audit log

audit log

audit.log (text/plain), 8.75 KB, created by Adam Litke on 2014-07-30 14:24:54 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Adam Litke

Created: 2014-07-30 14:24:54 UTC

Size: 8.75 KB

patch

obsolete

>type=USER_END msg=audit(1406729689.551:4872): pid=3715 uid=0 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_CMD msg=audit(1406729704.399:4873): pid=3726 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success'
>type=USER_START msg=audit(1406729704.400:4874): pid=3726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1406729704.432:4875): pid=3726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1406729717.754:4876): pid=3739 uid=1000 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/logs" cmd=6370202F7661722F6C6F672F61756469742F61756469742E6C6F67202E terminal=pts/0 res=success'
>type=USER_START msg=audit(1406729717.754:4877): pid=3739 uid=0 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_END msg=audit(1406729717.755:4878): pid=3739 uid=0 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_CMD msg=audit(1406729725.202:4879): pid=3744 uid=1000 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/logs" cmd=6370202F7661722F6C6F672F6C6962766972742F6C696276697274642E6C6F67202E terminal=pts/0 res=success'
>type=USER_START msg=audit(1406729725.202:4880): pid=3744 uid=0 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_END msg=audit(1406729725.203:4881): pid=3744 uid=0 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_CMD msg=audit(1406729733.274:4882): pid=3752 uid=1000 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/logs" cmd=6370202F7661722F6C6F672F6C6962766972742F71656D752F7463312E6C6F67202E terminal=pts/0 res=success'
>type=USER_START msg=audit(1406729733.275:4883): pid=3752 uid=0 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_END msg=audit(1406729733.276:4884): pid=3752 uid=0 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_CMD msg=audit(1406729741.569:4885): pid=3767 uid=1000 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/logs" cmd=63686D6F64203636362061756469742E6C6F67206C696276697274642E6C6F67207463312E6C6F67 terminal=pts/0 res=success'
>type=USER_START msg=audit(1406729741.570:4886): pid=3767 uid=0 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_END msg=audit(1406729741.571:4887): pid=3767 uid=0 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_CMD msg=audit(1406729745.616:4888): pid=3777 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success'
>type=USER_START msg=audit(1406729745.616:4889): pid=3777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1406729745.665:4890): pid=3777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1406729745.673:4891): pid=3779 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success'
>type=USER_START msg=audit(1406729745.673:4892): pid=3779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1406729745.784:4893): pid=3779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1406729794.417:4894): pid=3811 uid=1000 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/logs" cmd=6370202F7661722F6C6F672F61756469742F61756469742E6C6F67202E terminal=pts/0 res=success'
>type=USER_START msg=audit(1406729794.417:4895): pid=3811 uid=0 auid=1000 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'

Actions: View

Attachments on bug 1102881: 900481 | 900482 | 900483 | 900484 | 900523 | 901471 | 901490 | 922603 | 922604 | 922606 | 922607 | 923330