Attachment 950729 Details for Bug 1151814 – audit.log resulting in login0000.te

audit.log resulting in login0000.te

audit.log.login0000 (text/plain), 4.77 KB, created by Peter H. Jones on 2014-10-26 00:40:49 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Peter H. Jones

Created: 2014-10-26 00:40:49 UTC

Size: 4.77 KB

patch

obsolete

>type=DAEMON_ROTATE msg=audit(1414280373.413:1677): auditd sending auid=0 pid=1818 subj=unconfined_u:unconfined_r:unconfined_t:s0
>type=SERVICE_START msg=audit(1414280382.976:404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1414280382.976:405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=MAC_POLICY_LOAD msg=audit(1414280464.583:406): policy loaded auid=0 ses=2
>type=USER_AVC msg=audit(1414280476.137:407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc:  received policyload notice (seqno=2)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=SERVICE_START msg=audit(1414280476.161:408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_AUTH msg=audit(1414280478.632:409): pid=2229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantor=pam_unix acct="liveuser" exe="/usr/bin/login" hostname=? addr=? terminal=tty3 res=success'
>type=USER_ACCT msg=audit(1414280478.635:410): pid=2229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantor=pam_unix,pam_localuser acct="liveuser" exe="/usr/bin/login" hostname=? addr=? terminal=tty3 res=success'
>type=CRED_ACQ msg=audit(1414280478.635:411): pid=2229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantor=pam_unix acct="liveuser" exe="/usr/bin/login" hostname=? addr=? terminal=tty3 res=success'
>type=LOGIN msg=audit(1414280478.636:412): pid=2229 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=1000 old-ses=4294967295 ses=3 res=1
>type=USER_ROLE_CHANGE msg=audit(1414280478.744:413): pid=2229 uid=0 auid=1000 ses=3 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0 selected-context=unconfined_u:unconfined_r:unconfined_t:s0 exe="/usr/bin/login" hostname=? addr=? terminal=tty3 res=success'
>type=USER_START msg=audit(1414280478.828:414): pid=2229 uid=0 auid=1000 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantor=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="liveuser" exe="/usr/bin/login" hostname=? addr=? terminal=tty3 res=success'
>type=CRED_REFR msg=audit(1414280478.828:415): pid=2229 uid=0 auid=1000 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantor=pam_unix acct="liveuser" exe="/usr/bin/login" hostname=? addr=? terminal=tty3 res=success'
>type=USER_LOGIN msg=audit(1414280478.830:416): pid=2229 uid=0 auid=1000 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1000 exe="/usr/bin/login" hostname=? addr=? terminal=tty3 res=success'
>type=AVC msg=audit(1414280478.831:417): avc:  denied  { entrypoint } for  pid=2272 comm="login" path="/usr/bin/bash" dev="dm-0" ino=144641 scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:root_t:s0 tclass=file permissive=0
>type=CRED_DISP msg=audit(1414280478.833:418): pid=2229 uid=0 auid=1000 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantor=pam_unix acct="liveuser" exe="/usr/bin/login" hostname=? addr=? terminal=tty3 res=success'
>type=USER_END msg=audit(1414280478.874:419): pid=2229 uid=0 auid=1000 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantor=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="liveuser" exe="/usr/bin/login" hostname=? addr=? terminal=tty3 res=success'
>type=SERVICE_STOP msg=audit(1414280478.958:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1414280479.023:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1414280479.023:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1414280479.041:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'

Actions: View

Attachments on bug 1151814: 947309 | 950727 | 950728 | 950729