Advertisement
Guest User

audit.log

a guest
Jul 24th, 2014
211
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 4.12 KB | None | 0 0
  1. type=CRYPTO_KEY_USER msg=audit(1406198638.193:754): user pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=bc:43:af:b8:e1:f2:b5:46:5a:1e:aa:53:32:93:32:1f direction=? spid=7122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.49.101.214 terminal=? res=success'
  2. type=CRYPTO_KEY_USER msg=audit(1406198638.193:755): user pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:de:b5:0e:ac:1c:09:a6:1e:99:21:10:9c:92:30:21 direction=? spid=7122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.49.101.214 terminal=? res=success'
  3. type=CRYPTO_SESSION msg=audit(1406198638.194:756): user pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 spid=7122 suid=74 rport=45215 laddr=10.0.0.6 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.49.101.214 terminal=? res=success'
  4. type=CRYPTO_SESSION msg=audit(1406198638.194:757): user pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 spid=7122 suid=74 rport=45215 laddr=10.0.0.6 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.49.101.214 terminal=? res=success'
  5. type=AVC msg=audit(1406198638.250:758): avc: denied { search } for pid=7121 comm="sshd" name="/" dev=vdb1 ino=128 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
  6. type=SYSCALL msg=audit(1406198638.250:758): arch=c000003e syscall=2 success=no exit=-13 a0=7fc9cf5d30c0 a1=800 a2=1 a3=4000 items=0 ppid=6029 pid=7121 auid=4294967295 uid=0 gid=0 euid=501 suid=0 fsuid=501 egid=501 sgid=0 fsgid=501 tty=(none) ses=4294967295 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
  7. type=AVC msg=audit(1406198638.250:759): avc: denied { search } for pid=7121 comm="sshd" name="/" dev=vdb1 ino=128 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
  8. type=SYSCALL msg=audit(1406198638.250:759): arch=c000003e syscall=2 success=no exit=-13 a0=7fc9cf5d30c0 a1=800 a2=1 a3=4000 items=0 ppid=6029 pid=7121 auid=4294967295 uid=0 gid=0 euid=501 suid=0 fsuid=501 egid=501 sgid=0 fsgid=501 tty=(none) ses=4294967295 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
  9. type=USER_AUTH msg=audit(1406198638.250:760): user pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="oracle" exe="/usr/sbin/sshd" hostname=? addr=10.49.101.214 terminal=ssh res=failed'
  10. type=CRYPTO_KEY_USER msg=audit(1406198638.253:761): user pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7122 suid=74 rport=45215 laddr=10.0.0.6 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.49.101.214 terminal=? res=success'
  11. type=USER_ERR msg=audit(1406198638.253:762): user pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident acct="?" exe="/usr/sbin/sshd" hostname=10.49.101.214 addr=10.49.101.214 terminal=ssh res=failed'
  12. type=CRYPTO_KEY_USER msg=audit(1406198638.253:763): user pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=bc:43:af:b8:e1:f2:b5:46:5a:1e:aa:53:32:93:32:1f direction=? spid=7121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.49.101.214 terminal=? res=success'
  13. type=CRYPTO_KEY_USER msg=audit(1406198638.253:764): user pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=d7:de:b5:0e:ac:1c:09:a6:1e:99:21:10:9c:92:30:21 direction=? spid=7121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.49.101.214 terminal=? res=success'
  14. type=USER_LOGIN msg=audit(1406198638.253:765): user pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="oracle" exe="/usr/sbin/sshd" hostname=? addr=10.49.101.214 terminal=ssh res=failed'
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement