Advertisement
jonaslejon

auditd log

Dec 19th, 2020
358
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.40 KB | None | 0 0
  1. type=PROCTITLE msg=audit(12/19/20 20:08:34.281:14454) : proctitle=php-fpm: pool www
  2. type=PATH msg=audit(12/19/20 20:08:34.281:14454) : item=0 name=/var/www/settings.ini inode=5885 dev=fe:01 mode=file,644 ouid=root ogid=root rdev=00:00 nametype=NORMAL
  3. type=CWD msg=audit(12/19/20 20:08:34.281:14454) : cwd=/var/www/html/account/classes
  4. type=SYSCALL msg=audit(12/19/20 20:08:34.281:14454) : arch=x86_64 syscall=open success=yes exit=6 a0=0x7ffd4e264410 a1=O_RDONLY a2=0x1b6 a3=0x15 items=1 ppid=25901 pid=25905 auid=unset uid=www-data gid=www-data euid=www-data suid=www-data fsuid=www-data egid=www-data sgid=www-data fsgid=www-data tty=(none) ses=unset comm=php-fpm7.3 exe=/usr/sbin/php-fpm7.3 key=settings.ini
  5. ----
  6. type=PROCTITLE msg=audit(12/19/20 20:12:38.169:14603) : proctitle=php-fpm: pool www
  7. type=PATH msg=audit(12/19/20 20:12:38.169:14603) : item=0 name=/var/www/settings.ini inode=5885 dev=fe:01 mode=file,644 ouid=root ogid=root rdev=00:00 nametype=NORMAL
  8. type=CWD msg=audit(12/19/20 20:12:38.169:14603) : cwd=/var/www/html/account/classes
  9. type=SYSCALL msg=audit(12/19/20 20:12:38.169:14603) : arch=x86_64 syscall=open success=yes exit=6 a0=0x7ffd4e264410 a1=O_RDONLY a2=0x1b6 a3=0x15 items=1 ppid=25901 pid=25905 auid=unset uid=www-data gid=www-data euid=www-data suid=www-data fsuid=www-data egid=www-data sgid=www-data fsgid=www-data tty=(none) ses=unset comm=php-fpm7.3 exe=/usr/sbin/php-fpm7.3 key=settings.ini
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement