API tools faq
paste
danrancan

Dans Audit Logs

danrancan
Mar 30th, 2026
112
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 2.94 KB | Fixit | 0 0
raw download clone embed print report
  1. ### /var/log/audit/audit.log
  2. ### We are looking at this log due to receiving the message "audit: backlog limit exceeded" on our Raspberry Pi's console.
  3.  
  4. ### Log Start:
  5. type=AVC msg=audit(1774646702.049:21407420): apparmor="ALLOWED" operation="open" class="file" profile="php-fpm" name="/var/www/danran.rocks/wp-content/plugins/jetpack-boost/jetpack_vendor/automattic/jetpack-connection/src/sso/class-helpers.php" pid=893379 comm="php-fpm8.3" requested_mask="r" denied_mask="r" fsuid=33 ouid=33FSUID="www-data" OUID="www-data"
  6. type=SYSCALL msg=audit(1774646702.049:21407420): arch=c00000b7 syscall=56 success=yes exit=7 a0=ffffffffffffff9c a1=ffffc2650408 a2=0 a3=0 items=0 ppid=1560 pid=893379 auid=4294967295 uid=33 gid=33 euid=33 suid=33 fsuid=33 egid=33 sgid=33 fsgid=33 tty=(none) ses=4294967295 comm="php-fpm8.3" exe="/usr/sbin/php-fpm8.3" subj=php-fpm key=(null)ARCH=aarch64 SYSCALL=openat AUID="unset" UID="www-data" GID="www-data" EUID="www-data" SUID="www-data" FSUID="www-data" EGID="www-data" SGID="www-data" FSGID="www-data"
  7. type=PROCTITLE msg=audit(1774646702.049:21407420): proctitle=7068702D66706D3A20706F6F6C20777777
  8.  
  9. type=PROCTITLE msg=audit(1774646042.424:21342934): proctitle=7068702D66706D3A20706F6F6C20777777
  10. type=AVC msg=audit(1774646042.424:21342935): apparmor="ALLOWED" operation="open" class="file" profile="php-fpm" name="/var/www/mcmo.is/wp-content/plugins/hcode-addons/hcode-shortcodes/shortcode-map/hcode-shortcode-column-map.php" pid=893379 comm="php-fpm8.3" requested_mask="r" denied_mask="r" fsuid=33 ouid=33FSUID="www-data" OUID="www-data"
  11. type=SYSCALL msg=audit(1774646042.424:21342935): arch=c00000b7 syscall=56 success=yes exit=7 a0=ffffffffffffff9c a1=ffffc264f6f8 a2=0 a3=0 items=0 ppid=1560 pid=893379 auid=4294967295 uid=33 gid=33 euid=33 suid=33 fsuid=33 egid=33 sgid=33 fsgid=33 tty=(none) ses=4294967295 comm="php-fpm8.3" exe="/usr/sbin/php-fpm8.3" subj=php-fpm key=(null)ARCH=aarch64 SYSCALL=openat AUID="unset" UID="www-data" GID="www-data" EUID="www-data" SUID="www-data" FSUID="www-data" EGID="www-data" SGID="www-data" FSGID="www-data"
  12.  
  13. type=PROCTITLE msg=audit(1774646042.465:21343092): proctitle=7068702D66706D3A20706F6F6C20777777
  14. type=AVC msg=audit(1774646042.465:21343093): apparmor="ALLOWED" operation="open" class="file" profile="php-fpm" name="/var/www/danran.rocks/wp-includes/widgets/class-wp-widget-media-audio.php" pid=893375 comm="php-fpm8.3" requested_mask="r" denied_mask="r" fsuid=33 ouid=33FSUID="www-data" OUID="www-data"
  15. type=SYSCALL msg=audit(1774646042.465:21343093): arch=c00000b7 syscall=56 success=yes exit=7 a0=ffffffffffffff9c a1=ffffc264f6f8 a2=0 a3=0 items=0 ppid=1560 pid=893375 auid=4294967295 uid=33 gid=33 euid=33 suid=33 fsuid=33 egid=33 sgid=33 fsgid=33 tty=(none) ses=4294967295 comm="php-fpm8.3" exe="/usr/sbin/php-fpm8.3" subj=php-fpm key=(null)ARCH=aarch64 SYSCALL=openat AUID="unset" UID="www-data" GID="www-data" EUID="www-data" SUID="www-data" FSUID="www-data" EGID="www-data" SGID="www-data" FSGID="www-data"
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!