This service will be undergoing maintenance at 00:00 UTC, 2016-08-01. It is expected to last about 1 hours
Bug 129126 - useradd etc should have more verbose logs
useradd etc should have more verbose logs
Status: CLOSED WONTFIX
Product: Fedora
Classification: Fedora
Component: shadow-utils (Show other bugs)
rawhide
All Linux
medium Severity low
: ---
: ---
Assigned To: Eido Inoue
David Lawrence
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2004-08-04 05:49 EDT by Russell Coker
Modified: 2007-11-30 17:10 EST (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2004-09-23 15:23:17 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:


Attachments (Terms of Use)

  None (edit)
Description Russell Coker 2004-08-04 05:49:15 EDT
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (compatible; Konqueror/3.2; Linux) (KHTML, like Gecko)

Description of problem:
XXX xx xx:xx:xx fedora-se useradd[PID]: new group: name=XXX, gid=XXX
XXX xx xx:xx:xx fedora-se useradd[PID]: new user: name=XXX, uid=XXX, gid=XXX, home=/home/XXX, shell=/bin/bash

The logs for useradd are in the above format.  If there are a team of administrators then this information is not sufficient to determine who performed the command.

I believe that useradd should log the tty name as well at a minimum, and for a SE Linux system it would probably be good to log the context of the parent process (so we have the SE Linux identity of the user).

Version-Release number of selected component (if applicable):
4.0.3-23

How reproducible:
Always

Steps to Reproduce:
Add a user and read /var/log/secure.

Actual Results:  XXX xx xx:xx:xx fedora-se useradd[PID]: new group: name=XXX, gid=XXX
XXX xx xx:xx:xx fedora-se useradd[PID]: new user: name=XXX, uid=XXX, gid=XXX, home=/home/XXX, shell=/bin/bash

Expected Results:  XXX xx xx:xx:xx fedora-se useradd[PID]: new group added by root:sysadm_r:sysadm_r on /dev/pts/1: name=XXX, gid=XXX
XXX xx xx:xx:xx fedora-se useradd[PID]: new user added by root:sysadm_r:sysadm_r on /dev/pts/1: name=XXX, uid=XXX, gid=XXX, home=/home/XXX, shell=/bin/bash

Additional info:
Comment 1 Eido Inoue 2004-09-23 15:23:17 EDT
logwatch and other programs unfortunately rely on the current format.

Note You need to log in before you can comment on or make changes to this bug.